medium5.0Public exploit code
CVE-2000-0835
search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the que…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sambar Server 4.3/4.4 Beta 3 - Search CGI2000-09-15 · remote · windows · Verified
Impact
search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sambar | Sambar Server | Versions 4.3, 4.4 |