CVE-2017-5496

Affected software : Sawmill Enterprise 8.7.9. Vulnerability : remote authentication bypass by leveraging knowledge of a password hash (pass-the-hash). Root cause / mechanics : attacker who gains access to hashed user credentials can authenticate to the Sawmill interface without the actual plainte...

CVE-2005-1901

Sawmill before 7.1.6 is affected by CVE-2005-1901 due to XSS vulnerabilities in two input points: the username in the Add User window and the license key on the Licensing page. An authenticated, remote attacker can craft requests to trigger script execution in an affected user’s browser session. ...

CVE-2000-0588

SawMill 5.0.21 CGI is affected by an information disclosure vulnerability where remote, unauthenticated attackers can read the first line of arbitrary files by supplying a target file in the rfcf parameter. SawMill processes the parameter contents as configuration commands, enabling path traversa...

CVE-2000-0589

SawMill 5.0.21 is affected by a weakness in how it stores passwords, enabling an attacker to decrypt the administrative password and modify the SawMill configuration. The vulnerability stems from weak encryption/hash usage, facilitating information disclosure and potential configuration tampering...

CVE-2005-2950

The CVE-2005-2950 entry describes a cross-site scripting (XSS) vulnerability in Sawmill versions 7.0.0 through 7.1.13. The root cause is improper validation of user-supplied input appended to a GET request’s query string, enabling a remote attacker to inject arbitrary web script or HTML. The avai...

CVE-2010-1079

CVE-2010-1079 : The vulnerability affects Sawmill prior to 7.2.18 and is described as a Cross-site Scripting (XSS) flaw. The root cause is an XSS condition that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. No explicit exploitation steps, affected product...

CVE-2005-1900

The vulnerability CVE-2005-1900 affects Sawmill prior to 7.1.6, where an authenticated, remote attacker can bypass authentication to (1) gain administrative privileges or (2) add a license. The connected NASL entry confirms the affected range as Sawmill

CVE-2002-0265

The CVE-2002-0265 issue affects Sawmill for Solaris

CVE-2013-4947

CVE-2013-4947 concerns Sawmill’s update/build database page, with the vulnerable condition described as affecting Sawmill versions 8.6.2 and earlier. Connected sources indicate a remote vulnerability with unspecified impact and attack vectors, and do not provide concrete root-cause details. The p...