Approved changes feed: RSS · Atom

cpe:2.3:a:sawmill:sawmill:5.0.21:*:*:*:*:*:*:*

part: a version: 5.0.21 update: *

VendorSawmill (ce5e8eba-bf67-5447-9ff5-0b90af7d9d98)
ProductSawmill (4ef98102-9083-5ffa-a10e-63e9aa38c531)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1079 vulnerable 2026-06-08 04:54:04.828548 Details available
Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-03-23T19:00:00.000Z
Updated: 2024-09-16T17:33:26.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0589 vulnerable 2026-06-08 04:45:18.394308 Details available
SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration.
Published: 2000-07-19T04:00:00.000Z
Updated: 2024-08-08T05:21:31.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0588 vulnerable 2026-06-08 04:45:18.393937 Details available
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:21:31.286Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.