Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Jun 16, 2026
CVE-2003-1285
CVE-2003-1285
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2) testcgi.exe, (3) environ.pl, (4) the query parameter to samples/search.dll, (5) the price parameter to mortgage.pl, (6) the query string in dumpenv.pl, (7) the query string to dumpenv.pl, and (8) the E-Mail field of the guestbook script (book.pl).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21cpe:2.3:a:sambar:sambar_server:5.0:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:sambar:sambar_server:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta5:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta6:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta1:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta2:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta3:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta4:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta5:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.3:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta5:*:*:*:*:*:*
- (no CPE)range: <6.0 beta 6
Patches
Vulnerability mechanics
References
11- secunia.com/advisories/9578nvdPatch
- securitytracker.com/idnvdPatch
- www.osvdb.org/5782nvdExploitPatch
- www.osvdb.org/5783nvdExploitPatch
- www.osvdb.org/5784nvdExploitPatch
- www.osvdb.org/5785nvdExploitPatch
- www.osvdb.org/5805nvdExploitPatch
- www.idefense.com/application/poi/displaynvdVendor Advisory
- www.sambar.com/security.htmnvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/13305nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/16056nvd
News mentions
0No linked articles in our index yet.