medium4.3
CVE-2005-2950
Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in…
Impact
Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sawmill | Sawmill | Versions 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112654659400488&w=2
- http://secunia.com/advisories/16744/
- http://securityreason.com/securityalert/1
- http://www.nta-monitor.com/news/xss/sawmill/index.htm
- http://www.sawmill.net/version_history.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22206
- http://marc.info/?l=bugtraq&m=112654659400488&w=2
- http://secunia.com/advisories/16744/
- http://securityreason.com/securityalert/1
- http://www.nta-monitor.com/news/xss/sawmill/index.htm
- http://www.sawmill.net/version_history.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22206