Skip to content
OpenAdvisories
Unscored DSA-892-1 1 CVE

awstats - missing input sanitising

Published Nov 10, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 awstats 6.4-1sarge1

Vulnerabilities 1

  • Unscored —

    Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attac…