Detections
Analytics
Sawmill < 7.1.14 GET Request Query String XSS
medium Nessus Plugin ID 19681
Language:
Synopsis
An application running on the remote web server is affected by a cross-site scripting vulnerability.Description
The version of Sawmill running on the remote web server is affected by a cross-site scripting vulnerability due to improper validation of user-supplied input appended to a GET request. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary script code in a user's browser session.Solution
Upgrade to Sawmill version 7.1.14 or later. Alternatively, use Sawmill in CGI mode.See Also
Plugin Details
Severity: Medium
ID: 19681
File Name: sawmill_7_1_14.nasl
Version: 1.22
Type: remote
Family: CGI abuses : XSS
Published: 9/12/2005
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.8
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:sawmill:sawmill
Required KB Items: installed_sw/Sawmill
Exploit Ease: No exploit is required
Vulnerability Publication Date: 9/9/2005
Reference Information
CVE: CVE-2005-2950
BID: 14789