CVE-2004-2564

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp.

Affected products

Sambar Server: 6.1-beta2

References

http://secunia.com/advisories/11748
http://securitytracker.com/id?1010353
http://www.oliverkarow.de/research/sambar.txt
http://www.osvdb.org/6583
http://www.osvdb.org/6584
http://www.securityfocus.com/bid/10444
https://exchange.xforce.ibmcloud.com/vulnerabilities/16286
http://secunia.com/advisories/11748
http://securitytracker.com/id?1010353
http://www.oliverkarow.de/research/sambar.txt
http://www.osvdb.org/6583
http://www.osvdb.org/6584

Get alerted when CVE-2004-2564 or the next vulnerability affects your stack