Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Apr 16, 2026
CVE-2003-1285
CVE-2003-1285
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2) testcgi.exe, (3) environ.pl, (4) the query parameter to samples/search.dll, (5) the price parameter to mortgage.pl, (6) the query string in dumpenv.pl, (7) the query string to dumpenv.pl, and (8) the E-Mail field of the guestbook script (book.pl).
Affected products
20cpe:2.3:a:sambar:sambar_server:5.0:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:sambar:sambar_server:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta5:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta6:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta1:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta2:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta3:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta4:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.1:beta5:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.3:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:6.0:beta5:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- secunia.com/advisories/9578nvdPatch
- securitytracker.com/idnvdPatch
- www.osvdb.org/5782nvdExploitPatch
- www.osvdb.org/5783nvdExploitPatch
- www.osvdb.org/5784nvdExploitPatch
- www.osvdb.org/5785nvdExploitPatch
- www.osvdb.org/5805nvdExploitPatch
- www.idefense.com/application/poi/displaynvdVendor Advisory
- www.sambar.com/security.htmnvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/13305nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/16056nvd
News mentions
0No linked articles in our index yet.