| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2003-1286 | 7.5 |
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection:
|
11-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1284 | 5.0 |
Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the default scripts (1) environ.pl and (2) testcgi.exe.
|
11-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1287 | 4.6 |
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.
|
11-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1285 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2) testcgi.exe, (3) environ.pl, (4) the query paramet
|
11-07-2017 - 01:29 | 31-12-2003 - 05:00 |