CVE-2005-2950

CVE-2005-2950

EPSS 1.4%

Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=112654659400488&w=2 http://secunia.com/advisories/16744/http://securityreason.com/securityalert/1 https://exchange.xforce.ibmcloud.com/vulnerabilities/22206 http://www.nta-monitor.com/news/xss/sawmill/index.htm http://www.sawmill.net/version_history.html