Description
Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.
References
- http://www.sawmill.net/version_history.html
- http://www.nta-monitor.com/news/xss/sawmill/index.htm
- 16744 third-party-advisory
- sawmill-unknown-xss(22206) vdb-entry
- 20050912 Sawmill XSS vuln mailing-list
- 1 third-party-advisory