Sawmill < 7.1.14 GET Request Query String XSS
Medium Nessus Network Monitor Plugin ID 3219
SynopsisThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.
DescriptionThe remote host is running Sawmill, a weblog analysis package. The version of Sawmill installed on the remote host suffers from a cross-site scripting flaw because its standalone web server treats an arbitrary query string appended to a GET request as a configuration command and fails to sanitize it before using it in an error page. An unauthenticated attacker may be able to exploit this issue to steal authentication information of users of the affected application.
SolutionUpgrade to version 7.1.14 or higher or use Sawmill in CGI mode.