4.3

CVE-2010-1079

Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sawmill ≫ Sawmill Version <= 7.2.17
Sawmill ≫ Sawmill Version 5.0.21
Sawmill ≫ Sawmill Version 6.2
Sawmill ≫ Sawmill Version 6.2.1
Sawmill ≫ Sawmill Version 6.2.2
Sawmill ≫ Sawmill Version 6.2.3
Sawmill ≫ Sawmill Version 6.2.4
Sawmill ≫ Sawmill Version 6.2.5
Sawmill ≫ Sawmill Version 6.2.6
Sawmill ≫ Sawmill Version 6.2.7
Sawmill ≫ Sawmill Version 6.2.8
Sawmill ≫ Sawmill Version 6.2.8a
Sawmill ≫ Sawmill Version 6.2.9
Sawmill ≫ Sawmill Version 6.2.10
Sawmill ≫ Sawmill Version 6.2.11
Sawmill ≫ Sawmill Version 6.2.12
Sawmill ≫ Sawmill Version 6.2.13
Sawmill ≫ Sawmill Version 6.2.14
Sawmill ≫ Sawmill Version 7.0.0
Sawmill ≫ Sawmill Version 7.0.1
Sawmill ≫ Sawmill Version 7.0.2
Sawmill ≫ Sawmill Version 7.0.3
Sawmill ≫ Sawmill Version 7.0.4
Sawmill ≫ Sawmill Version 7.0.5
Sawmill ≫ Sawmill Version 7.0.6
Sawmill ≫ Sawmill Version 7.0.7
Sawmill ≫ Sawmill Version 7.0.8
Sawmill ≫ Sawmill Version 7.0.9
Sawmill ≫ Sawmill Version 7.0.10
Sawmill ≫ Sawmill Version 7.0.10a
Sawmill ≫ Sawmill Version 7.0.10b
Sawmill ≫ Sawmill Version 7.0.10c
Sawmill ≫ Sawmill Version 7.0.10d
Sawmill ≫ Sawmill Version 7.0.10e
Sawmill ≫ Sawmill Version 7.0.10f
Sawmill ≫ Sawmill Version 7.0.10g
Sawmill ≫ Sawmill Version 7.0.10h
Sawmill ≫ Sawmill Version 7.0.10i
Sawmill ≫ Sawmill Version 7.0.10j
Sawmill ≫ Sawmill Version 7.0.10k
Sawmill ≫ Sawmill Version 7.1
Sawmill ≫ Sawmill Version 7.1.1
Sawmill ≫ Sawmill Version 7.1.1b
Sawmill ≫ Sawmill Version 7.1.2
Sawmill ≫ Sawmill Version 7.1.3
Sawmill ≫ Sawmill Version 7.1.4
Sawmill ≫ Sawmill Version 7.1.5
Sawmill ≫ Sawmill Version 7.1.6
Sawmill ≫ Sawmill Version 7.1.7
Sawmill ≫ Sawmill Version 7.1.8
Sawmill ≫ Sawmill Version 7.1.9
Sawmill ≫ Sawmill Version 7.1.10
Sawmill ≫ Sawmill Version 7.1.11
Sawmill ≫ Sawmill Version 7.1.12
Sawmill ≫ Sawmill Version 7.1.13
Sawmill ≫ Sawmill Version 7.1.14
Sawmill ≫ Sawmill Version 7.2
Sawmill ≫ Sawmill Version 7.2.1
Sawmill ≫ Sawmill Version 7.2.2
Sawmill ≫ Sawmill Version 7.2.3
Sawmill ≫ Sawmill Version 7.2.4
Sawmill ≫ Sawmill Version 7.2.5
Sawmill ≫ Sawmill Version 7.2.6
Sawmill ≫ Sawmill Version 7.2.7
Sawmill ≫ Sawmill Version 7.2.8
Sawmill ≫ Sawmill Version 7.2.9
Sawmill ≫ Sawmill Version 7.2.10
Sawmill ≫ Sawmill Version 7.2.11
Sawmill ≫ Sawmill Version 7.2.12
Sawmill ≫ Sawmill Version 7.2.13
Sawmill ≫ Sawmill Version 7.2.14
Sawmill ≫ Sawmill Version 7.2.15
Sawmill ≫ Sawmill Version 7.2.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.02% 0.589
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.sawmill.net/version_history7.html
http://secunia.com/advisories/38730
Vendor Advisory
http://www.securityfocus.com/bid/38387