Lucene search

K
SambarSambar Server5.1

6 matches found

CVE
CVE
added 2002/05/03 4:0 a.m.47 views

CVE-2001-1292

Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.

7.5CVSS8.2AI score0.02752EPSS
CVE
CVE
added 2005/11/22 2:0 a.m.40 views

CVE-2003-1287

Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.

4.6CVSS7.5AI score0.00139EPSS
CVE
CVE
added 2005/11/22 2:0 a.m.36 views

CVE-2003-1285

Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2) testcgi.exe, (3) environ.pl, (4) the query parameter to samples/search.dll, (5) the price parameter...

4.3CVSS5.8AI score0.01386EPSS
CVE
CVE
added 2002/06/25 4:0 a.m.33 views

CVE-2002-0128

cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.

7.5CVSS7.5AI score0.08653EPSS
CVE
CVE
added 2003/04/02 5:0 a.m.32 views

CVE-2002-0737

Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character.

6.4CVSS6.9AI score0.10635EPSS
CVE
CVE
added 2005/11/22 2:0 a.m.31 views

CVE-2003-1286

HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests.

7.5CVSS7.1AI score0.09764EPSS