Read the docs
TI-2005-02783 Aliases CVE-2005-2950GHSA-pj42-h5q2-22w3

Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote…

Priority LOW 23Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.

Why it matters now

EPSS 0.01384 72nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 37

CPEVersionsRoleVendor
cpe:2.3:a:sawmill:sawmill:7.0.0:*:*:*:*:*:*:*7.0.0VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.1:*:*:*:*:*:*:*7.0.1VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.2:*:*:*:*:*:*:*7.0.2VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.3:*:*:*:*:*:*:*7.0.3VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.4:*:*:*:*:*:*:*7.0.4VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.5:*:*:*:*:*:*:*7.0.5VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.6:*:*:*:*:*:*:*7.0.6VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.7:*:*:*:*:*:*:*7.0.7VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.8:*:*:*:*:*:*:*7.0.8VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.9:*:*:*:*:*:*:*7.0.9VulnerableSawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.3:*:*:*:*:*:*:* Versions 7.0.3 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.4:*:*:*:*:*:*:* Versions 7.0.4 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.5:*:*:*:*:*:*:* Versions 7.0.5 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.6:*:*:*:*:*:*:* Versions 7.0.6 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.7:*:*:*:*:*:*:* Versions 7.0.7 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.8:*:*:*:*:*:*:* Versions 7.0.8 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.9:*:*:*:*:*:*:* Versions 7.0.9 Vulnerable ·Sawmill
Show 27 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sawmill:sawmill:7.0.10:*:*:*:*:*:*:*7.0.10VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10a:*:*:*:*:*:*:*7.0.10aVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10b:*:*:*:*:*:*:*7.0.10bVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10c:*:*:*:*:*:*:*7.0.10cVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10d:*:*:*:*:*:*:*7.0.10dVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10e:*:*:*:*:*:*:*7.0.10eVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10f:*:*:*:*:*:*:*7.0.10fVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10g:*:*:*:*:*:*:*7.0.10gVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10h:*:*:*:*:*:*:*7.0.10hVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10i:*:*:*:*:*:*:*7.0.10iVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10j:*:*:*:*:*:*:*7.0.10jVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10k:*:*:*:*:*:*:*7.0.10kVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1:*:*:*:*:*:*:*7.1VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.1:*:*:*:*:*:*:*7.1.1VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.2:*:*:*:*:*:*:*7.1.2VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.3:*:*:*:*:*:*:*7.1.3VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.4:*:*:*:*:*:*:*7.1.4VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.5:*:*:*:*:*:*:*7.1.5VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.6:*:*:*:*:*:*:*7.1.6VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.7:*:*:*:*:*:*:*7.1.7VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.8:*:*:*:*:*:*:*7.1.8VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.9:*:*:*:*:*:*:*7.1.9VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.10:*:*:*:*:*:*:*7.1.10VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.11:*:*:*:*:*:*:*7.1.11VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.12:*:*:*:*:*:*:*7.1.12VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.13:*:*:*:*:*:*:*7.1.13VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.14:*:*:*:*:*:*:*7.1.14VulnerableSawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10:*:*:*:*:*:*:* Versions 7.0.10 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10a:*:*:*:*:*:*:* Versions 7.0.10a Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10b:*:*:*:*:*:*:* Versions 7.0.10b Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10c:*:*:*:*:*:*:* Versions 7.0.10c Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10d:*:*:*:*:*:*:* Versions 7.0.10d Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10e:*:*:*:*:*:*:* Versions 7.0.10e Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10f:*:*:*:*:*:*:* Versions 7.0.10f Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10g:*:*:*:*:*:*:* Versions 7.0.10g Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10h:*:*:*:*:*:*:* Versions 7.0.10h Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10i:*:*:*:*:*:*:* Versions 7.0.10i Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10j:*:*:*:*:*:*:* Versions 7.0.10j Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10k:*:*:*:*:*:*:* Versions 7.0.10k Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.2:*:*:*:*:*:*:* Versions 7.1.2 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.3:*:*:*:*:*:*:* Versions 7.1.3 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.4:*:*:*:*:*:*:* Versions 7.1.4 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.5:*:*:*:*:*:*:* Versions 7.1.5 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.6:*:*:*:*:*:*:* Versions 7.1.6 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.7:*:*:*:*:*:*:* Versions 7.1.7 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.8:*:*:*:*:*:*:* Versions 7.1.8 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.9:*:*:*:*:*:*:* Versions 7.1.9 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.10:*:*:*:*:*:*:* Versions 7.1.10 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.11:*:*:*:*:*:*:* Versions 7.1.11 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.12:*:*:*:*:*:*:* Versions 7.1.12 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.13:*:*:*:*:*:*:* Versions 7.1.13 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.14:*:*:*:*:*:*:* Versions 7.1.14 Vulnerable ·Sawmill

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-2950
  2. 2026-10-03 Alias added: GHSA-pj42-h5q2-22w3

References

Exploit 1

Advisory 1

Other 2

  • TI-2017-03516 Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash. CVSS 3.0CRITICAL 9.8
  • TI-2000-00587 SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily… CVSS 2.0HIGH 7.5
  • TI-2005-01801 Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain… CVSS 2.0HIGH 7.5
  • TI-2013-04327 Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3… CVSS 2.0HIGH 7.5
  • TI-2000-00586 SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary… CVSS 2.0MEDIUM 5.0
  • TI-2005-01802 Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote… CVSS 2.0MEDIUM 4.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences