Unscored DSA-1679-1 2 CVEs

awstats - cross-site scripting

Published Dec 3, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	awstats	6.5+dfsg-1+etch1

Vulnerabilities 2

Unscored —

CVE-2008-3714 Public exploit

Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web s…

awstats Debian

Aug 19, 2008
Unscored —

CVE-2008-5080

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to condu…

awstats Debian

Dec 3, 2008