CVE-2003-1285

Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2) testcgi.exe, (3) environ.pl, (4) the query parameter to samples/search.dll, (5) the price parameter to mortgage.pl, (6) the query string in dumpenv.pl, (7) the query string to dumpenv.pl, and (8) the E-Mail field of the guestbook script (book.pl).

• http://secunia.com/advisories/9578Patch
• http://securitytracker.com/id?1007819Patch
• http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=trueVendor Advisory
• http://www.osvdb.org/5782Exploit, Patch
• http://www.osvdb.org/5783Exploit, Patch
• http://www.osvdb.org/5784Exploit, Patch
• http://www.osvdb.org/5785Exploit, Patch
• http://www.osvdb.org/5805Exploit, Patch
• http://www.sambar.com/security.htmVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13305
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16056
• http://secunia.com/advisories/9578Patch
• http://securitytracker.com/id?1007819Patch
• http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=trueVendor Advisory
• http://www.osvdb.org/5782Exploit, Patch
• http://www.osvdb.org/5783Exploit, Patch
• http://www.osvdb.org/5784Exploit, Patch
• http://www.osvdb.org/5785Exploit, Patch
• http://www.osvdb.org/5805Exploit, Patch
• http://www.sambar.com/security.htmVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13305
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16056

Published

Dec 31, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-1279S-PLUS 6.0 allows local users to overwrite arbitrary files a…
• CVE-2003-1280Directory traversal vulnerability in cgihtml 1.69 allows rem…
• CVE-2003-1281cgihtml 1.69 allows local users to overwrite arbitrary files…
• CVE-2003-1282IBM Net.Data allows remote attackers to obtain sensitive inf…
• CVE-2003-1283KaZaA Media Desktop (KMD) 2.0 launches advertisements in the…
• CVE-2003-1284Sambar Server before 6.0 beta 6 allows remote attackers to o…
• CVE-2003-1286HTTP Proxy in Sambar Server before 6.0 beta 6, when security…
• CVE-2003-1287Sambar Server before 6.0 beta 3 allows attackers with physic…
• CVE-2003-1288Multiple race conditions in Linux-VServer 1.22 with Linux ke…
• CVE-2003-1289The iBCS2 system call translator for statfs in NetBSD 1.5 th…
• CVE-2003-1290BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, …
• CVE-2003-1291VMware ESX Server 1.5.2 before Patch 4 allows local users to…