Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (5)
| Vulnerability |
Summary |
Aliases |
|
VCID-48cr-bq8t-fqd3
|
Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, (2) refererpagesfilterex, (3) urlfilterex, (4) urlfilter, (5) hostfilter, or (6) hostfilterex parameters, a different set of vectors than CVE-2006-1945.
|
CVE-2006-3681
|
|
VCID-7896-2ufa-kqd1
|
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters.
|
CVE-2006-3682
|
|
VCID-gtjm-xaua-5bhm
|
AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive.
|
CVE-2006-2644
|
|
VCID-sy25-mjxc-47bn
|
AWStats contains a bug in the sanitization of the input parameters which
can lead to the remote execution of arbitrary code.
|
CVE-2006-1945
|
|
VCID-xwvz-ewcf-x7fm
|
AWStats contains a bug in the sanitization of the input parameters which
can lead to the remote execution of arbitrary code.
|
CVE-2006-2237
|