Skip to content
OpenAdvisories
Unscored DSA-1058-1 1 CVE

awstats - missing input sanitising

Published May 18, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 awstats 6.4-1sarge2

Vulnerabilities 1

  • Unscored —
    CVE-2006-2237 Public exploit EPSS 59%

    The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbi…