Skip to content
OpenAdvisories
Unscored DSA-1075-1 2 CVEs

awstats - programming error

Published May 26, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 awstats 6.4-1sarge3

Vulnerabilities 2

  • Unscored —
    CVE-2006-1945 Public exploit

    Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arb…

    awstats Debian
  • Unscored —
    CVE-2006-2644

    AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the conf…

    awstats Debian