server-only vulnerabilities — Scandar