6 results · Feed
-
High 7.8
AWStats 8.0 is vulnerable to Command Injection via the open function
-
Medium 6.1
AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper ch…
-
Unscored —
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), eve…
-
Unscored —
In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only re…
-
Unscored —CVE-2018-10245 Scanner template
A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is al…
-
Unscored —
Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" pa…