79 matches found
CVE-2010-1079
Cross-site scripting XSS vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Sawmill < 7.2.18 Unspecified Cross-Site Scripting Vulnerability
Binary data 5344.prm...
Sawmill Unspecified Cross Site Scripting Vulnerability
Sawmill is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Sawmill未明远程权限提升漏洞
BUGTRAQ ID: 13864 Sawmill是个站点日志分析工具包，它有Linux/Unix/Windows/MacOS版本，默认下监听8987端口。 Sawmill中存在未明的远程权限提升漏洞，攻击者可能利用此漏洞在主机上执行任意命令。 起因是应用程序没有正确的过滤用户输入。攻击者可能利用这个漏洞在受影响的系统上获得管理权限。 Sawmill Sawmill 7.1.5 Sawmill Sawmill 7.1.4 Sawmill Sawmill 7.1.3 Sawmill Sawmill 7.1.2 Sawmill Sawmill 7.1.1 Sawmill Sawmill 7....
CVE-2005-2950
Cross-site scripting XSS vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request...
CVE-2005-2950
The CVE-2005-2950 entry describes a cross-site scripting (XSS) vulnerability in Sawmill versions 7.0.0 through 7.1.13. The root cause is improper validation of user-supplied input appended to a GET request’s query string, enabling a remote attacker to inject arbitrary web script or HTML. The avai...
CVE-2005-2950
Cross-site scripting XSS vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request...
Sawmill < 7.1.14 GET Request Query String XSS
The version of Sawmill running on the remote web server is affected by a cross-site scripting vulnerability due to improper validation of user-supplied input appended to a GET request. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary scri...
[Full-disclosure] Sawmill XSS vuln
This has been delayed until the vendor had released a new version: SNIP Date: Fri, 26 Aug 2005 11:48:48 -0700 From: Greg Ferrar [email protected] User-Agent: Mozilla Thunderbird 1.0.2 Macintosh/20050317 X-Accept-Language: en-us, en To: [email protected] Cc: [email protected]...
Sawmill < 7.1.14 GET Request Query String XSS
Binary data 3219.prm...
Sawmill < 7.1.6 Multiple Vulnerabilities
According to its version number, the Sawmill application running on the remote web server is affected by multiple vulnerabilities : - An unspecified flaw exists that allows an authenticated, remote attacker to gain administrative privileges. CVE-2005-1900 - An unspecified flaw allows an...
CVE-2005-1901
Multiple cross-site scripting XSS vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the username in the Add User window or 2 the license key in the Licensing page...
CVE-2005-1900
Sawmill before 7.1.6 allows remote attackers to bypass authentication and 1 gain administrative privileges or 2 add a license...
CVE-2005-1901
Sawmill before 7.1.6 is affected by CVE-2005-1901 due to XSS vulnerabilities in two input points: the username in the Add User window and the license key on the Licensing page. An authenticated, remote attacker can craft requests to trigger script execution in an affected user’s browser session. ...
CVE-2005-1900
The vulnerability CVE-2005-1900 affects Sawmill prior to 7.1.6, where an authenticated, remote attacker can bypass authentication to (1) gain administrative privileges or (2) add a license. The connected NASL entry confirms the affected range as Sawmill
CVE-2005-1900
Sawmill before 7.1.6 allows remote attackers to bypass authentication and 1 gain administrative privileges or 2 add a license...
CVE-2005-1901
Multiple cross-site scripting XSS vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the username in the Add User window or 2 the license key in the Licensing page...
[SA15499] Sawmill Security Bypass and Cross-Site Scripting Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...