CVE-2005-2950

CVE-2005-2950

EPSS 1.4%

Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://marc.info/?l=bugtraq&m=112654659400488&w=2 http://secunia.com/advisories/16744/http://securityreason.com/securityalert/1 https://exchange.xforce.ibmcloud.com/vulnerabilities/22206 http://www.nta-monitor.com/news/xss/sawmill/index.htm http://www.sawmill.net/version_history.html