Read the docs
TI-2010-01038 Aliases CVE-2010-1079GHSA-62rh-xcf4-h7w5

Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers…

Priority LOW 22CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Why it matters now

EPSS 0.01022 63rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 73

CPEVersionsRoleVendor
cpe:2.3:a:sawmill:sawmill:*:*:*:*:*:*:*:*up to 7.2.17VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:5.0.21:*:*:*:*:*:*:*5.0.21VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2:*:*:*:*:*:*:*6.2VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.1:*:*:*:*:*:*:*6.2.1VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.2:*:*:*:*:*:*:*6.2.2VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.3:*:*:*:*:*:*:*6.2.3VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.4:*:*:*:*:*:*:*6.2.4VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.5:*:*:*:*:*:*:*6.2.5VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.6:*:*:*:*:*:*:*6.2.6VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.7:*:*:*:*:*:*:*6.2.7VulnerableSawmill
  • cpe:2.3:a:sawmill:sawmill:*:*:*:*:*:*:*:* Versions up to 7.2.17 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:5.0.21:*:*:*:*:*:*:* Versions 5.0.21 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.1:*:*:*:*:*:*:* Versions 6.2.1 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.2:*:*:*:*:*:*:* Versions 6.2.2 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.3:*:*:*:*:*:*:* Versions 6.2.3 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.4:*:*:*:*:*:*:* Versions 6.2.4 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.5:*:*:*:*:*:*:* Versions 6.2.5 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.6:*:*:*:*:*:*:* Versions 6.2.6 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.7:*:*:*:*:*:*:* Versions 6.2.7 Vulnerable ·Sawmill
Show 63 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sawmill:sawmill:6.2.8:*:*:*:*:*:*:*6.2.8VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.8a:*:*:*:*:*:*:*6.2.8aVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.9:*:*:*:*:*:*:*6.2.9VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.10:*:*:*:*:*:*:*6.2.10VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.11:*:*:*:*:*:*:*6.2.11VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.12:*:*:*:*:*:*:*6.2.12VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.13:*:*:*:*:*:*:*6.2.13VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:6.2.14:*:*:*:*:*:*:*6.2.14VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.0:*:*:*:*:*:*:*7.0.0VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.1:*:*:*:*:*:*:*7.0.1VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.2:*:*:*:*:*:*:*7.0.2VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.3:*:*:*:*:*:*:*7.0.3VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.4:*:*:*:*:*:*:*7.0.4VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.5:*:*:*:*:*:*:*7.0.5VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.6:*:*:*:*:*:*:*7.0.6VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.7:*:*:*:*:*:*:*7.0.7VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.8:*:*:*:*:*:*:*7.0.8VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.9:*:*:*:*:*:*:*7.0.9VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10:*:*:*:*:*:*:*7.0.10VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10a:*:*:*:*:*:*:*7.0.10aVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10b:*:*:*:*:*:*:*7.0.10bVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10c:*:*:*:*:*:*:*7.0.10cVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10d:*:*:*:*:*:*:*7.0.10dVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10e:*:*:*:*:*:*:*7.0.10eVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10f:*:*:*:*:*:*:*7.0.10fVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10g:*:*:*:*:*:*:*7.0.10gVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10h:*:*:*:*:*:*:*7.0.10hVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10i:*:*:*:*:*:*:*7.0.10iVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10j:*:*:*:*:*:*:*7.0.10jVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.0.10k:*:*:*:*:*:*:*7.0.10kVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1:*:*:*:*:*:*:*7.1VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.1:*:*:*:*:*:*:*7.1.1VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.1b:*:*:*:*:*:*:*7.1.1bVulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.2:*:*:*:*:*:*:*7.1.2VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.3:*:*:*:*:*:*:*7.1.3VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.4:*:*:*:*:*:*:*7.1.4VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.5:*:*:*:*:*:*:*7.1.5VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.6:*:*:*:*:*:*:*7.1.6VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.7:*:*:*:*:*:*:*7.1.7VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.8:*:*:*:*:*:*:*7.1.8VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.9:*:*:*:*:*:*:*7.1.9VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.10:*:*:*:*:*:*:*7.1.10VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.11:*:*:*:*:*:*:*7.1.11VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.12:*:*:*:*:*:*:*7.1.12VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.13:*:*:*:*:*:*:*7.1.13VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.1.14:*:*:*:*:*:*:*7.1.14VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2:*:*:*:*:*:*:*7.2VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.1:*:*:*:*:*:*:*7.2.1VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.2:*:*:*:*:*:*:*7.2.2VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.3:*:*:*:*:*:*:*7.2.3VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.4:*:*:*:*:*:*:*7.2.4VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.5:*:*:*:*:*:*:*7.2.5VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.6:*:*:*:*:*:*:*7.2.6VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.7:*:*:*:*:*:*:*7.2.7VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.8:*:*:*:*:*:*:*7.2.8VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.9:*:*:*:*:*:*:*7.2.9VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.10:*:*:*:*:*:*:*7.2.10VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.11:*:*:*:*:*:*:*7.2.11VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.12:*:*:*:*:*:*:*7.2.12VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.13:*:*:*:*:*:*:*7.2.13VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.14:*:*:*:*:*:*:*7.2.14VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.15:*:*:*:*:*:*:*7.2.15VulnerableSawmill
cpe:2.3:a:sawmill:sawmill:7.2.16:*:*:*:*:*:*:*7.2.16VulnerableSawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.8:*:*:*:*:*:*:* Versions 6.2.8 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.8a:*:*:*:*:*:*:* Versions 6.2.8a Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.9:*:*:*:*:*:*:* Versions 6.2.9 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.10:*:*:*:*:*:*:* Versions 6.2.10 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.11:*:*:*:*:*:*:* Versions 6.2.11 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.12:*:*:*:*:*:*:* Versions 6.2.12 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.13:*:*:*:*:*:*:* Versions 6.2.13 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:6.2.14:*:*:*:*:*:*:* Versions 6.2.14 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.3:*:*:*:*:*:*:* Versions 7.0.3 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.4:*:*:*:*:*:*:* Versions 7.0.4 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.5:*:*:*:*:*:*:* Versions 7.0.5 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.6:*:*:*:*:*:*:* Versions 7.0.6 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.7:*:*:*:*:*:*:* Versions 7.0.7 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.8:*:*:*:*:*:*:* Versions 7.0.8 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.9:*:*:*:*:*:*:* Versions 7.0.9 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10:*:*:*:*:*:*:* Versions 7.0.10 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10a:*:*:*:*:*:*:* Versions 7.0.10a Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10b:*:*:*:*:*:*:* Versions 7.0.10b Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10c:*:*:*:*:*:*:* Versions 7.0.10c Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10d:*:*:*:*:*:*:* Versions 7.0.10d Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10e:*:*:*:*:*:*:* Versions 7.0.10e Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10f:*:*:*:*:*:*:* Versions 7.0.10f Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10g:*:*:*:*:*:*:* Versions 7.0.10g Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10h:*:*:*:*:*:*:* Versions 7.0.10h Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10i:*:*:*:*:*:*:* Versions 7.0.10i Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10j:*:*:*:*:*:*:* Versions 7.0.10j Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.0.10k:*:*:*:*:*:*:* Versions 7.0.10k Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.1b:*:*:*:*:*:*:* Versions 7.1.1b Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.2:*:*:*:*:*:*:* Versions 7.1.2 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.3:*:*:*:*:*:*:* Versions 7.1.3 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.4:*:*:*:*:*:*:* Versions 7.1.4 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.5:*:*:*:*:*:*:* Versions 7.1.5 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.6:*:*:*:*:*:*:* Versions 7.1.6 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.7:*:*:*:*:*:*:* Versions 7.1.7 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.8:*:*:*:*:*:*:* Versions 7.1.8 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.9:*:*:*:*:*:*:* Versions 7.1.9 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.10:*:*:*:*:*:*:* Versions 7.1.10 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.11:*:*:*:*:*:*:* Versions 7.1.11 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.12:*:*:*:*:*:*:* Versions 7.1.12 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.13:*:*:*:*:*:*:* Versions 7.1.13 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.1.14:*:*:*:*:*:*:* Versions 7.1.14 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.1:*:*:*:*:*:*:* Versions 7.2.1 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.2:*:*:*:*:*:*:* Versions 7.2.2 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.3:*:*:*:*:*:*:* Versions 7.2.3 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.4:*:*:*:*:*:*:* Versions 7.2.4 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.5:*:*:*:*:*:*:* Versions 7.2.5 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.6:*:*:*:*:*:*:* Versions 7.2.6 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.7:*:*:*:*:*:*:* Versions 7.2.7 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.8:*:*:*:*:*:*:* Versions 7.2.8 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.9:*:*:*:*:*:*:* Versions 7.2.9 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.10:*:*:*:*:*:*:* Versions 7.2.10 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.11:*:*:*:*:*:*:* Versions 7.2.11 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.12:*:*:*:*:*:*:* Versions 7.2.12 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.13:*:*:*:*:*:*:* Versions 7.2.13 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.14:*:*:*:*:*:*:* Versions 7.2.14 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.15:*:*:*:*:*:*:* Versions 7.2.15 Vulnerable ·Sawmill
  • cpe:2.3:a:sawmill:sawmill:7.2.16:*:*:*:*:*:*:* Versions 7.2.16 Vulnerable ·Sawmill

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1079
  2. 2026-10-03 Alias added: GHSA-62rh-xcf4-h7w5

References

Other 1

  • TI-2017-03516 Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash. CVSS 3.0CRITICAL 9.8
  • TI-2000-00587 SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily… CVSS 2.0HIGH 7.5
  • TI-2005-01801 Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain… CVSS 2.0HIGH 7.5
  • TI-2013-04327 Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3… CVSS 2.0HIGH 7.5
  • TI-2000-00586 SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary… CVSS 2.0MEDIUM 5.0
  • TI-2005-02783 Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote… CVSS 2.0MEDIUM 4.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences