awstats

9 results · Clear filters · Feed

• Unscored —
  CVE-2010-4367 Public exploit EPSS 27%

  awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute ar…

  awstats Debian
  Dec 2, 2010
• Unscored —
  CVE-2008-3714 Public exploit

  Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web s…

  awstats Debian
  Aug 19, 2008
• Unscored —
  CVE-2006-3682 Public exploit

  awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) y…

  awstats Debian
  Jul 18, 2006
• Unscored —
  CVE-2006-2237 Public exploit EPSS 59%

  The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbi…

  awstats Debian
  May 8, 2006
• Unscored —
  CVE-2006-1945 Public exploit

  Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arb…

  awstats Debian
  Apr 20, 2006
• Unscored —
  CVE-2005-0436 Public exploit

  Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of…

  awstats Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0435 Public exploit

  awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginm…

  awstats Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0438 Public exploit

  awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug paramete…

  awstats Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0116 Public exploit EPSS 75%

  AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharact…

  awstats Debian
  Jan 19, 2005