Vulnerabilities > CVE-2005-2950 - Cross-Site Scripting vulnerability in Sawmill

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
sawmill
nessus
NVD
Published: 2005-09-16
Updated: 2017-07-11

Summary

Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.

Vulnerable Configurations

Part Description Count
Application
Sawmill
37

Nessus

NASL familyCGI abuses : XSS
NASL idSAWMILL_7_1_14.NASL
descriptionThe version of Sawmill running on the remote web server is affected by a cross-site scripting vulnerability due to improper validation of user-supplied input appended to a GET request. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary script code in a user
last seen2020-06-01
modified2020-06-02
plugin id19681
published2005-09-12
reporterThis script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/19681
titleSawmill < 7.1.14 GET Request Query String XSS

References