Description
Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter.
References
- awstatstotals-unspecified-xss(44706) vdb-entry
- http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt
- http://www.telartis.nl/xcms/awstats/
- 4218 third-party-advisory
- ADV-2008-2442 vdb-entry
- 31630 third-party-advisory
- 20080826 Multiple Vulnerabilities in AWStats Totals mailing-list