CVE-2012-4547

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

4.3 MediumFix available

CVE-2012-4547 is a medium vulnerability (CVSS 4.3) in Laurent Destailleur Awstats, published October 31, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.80%, the 93rd percentile. Fixed in awstats 7.1~dfsg-1.

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

Exploit likelihood

5.80%Up 4.8 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

Record: CVE-2012-4547
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

Record: CVE-2012-4547
Updated: 2026-11-02

EUVDEUVD-2012-4475 No score

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

Record: EUVD-2012-4475
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vx3h-mw4x-r37x No score

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

Record: GHSA-vx3h-mw4x-r37x
Weakness: CWE-79
Updated: 2026-11-02

OSV No score

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

Record: CVE-2012-4547
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-4547 No score

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors.

Record: DEBIAN-CVE-2012-4547
Updated: 2026-11-02

Affected products

laurent destailleur awstats

Affected packages

Affected packages
Package	Affected	Fixed
`awstats` Debian:12	before 7.1~dfsg-1	7.1~dfsg-1
`awstats` Debian:13	before 7.1~dfsg-1	7.1~dfsg-1
`awstats` Debian:14	before 7.1~dfsg-1	7.1~dfsg-1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Nuclei	AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, Nuclei, NVD, OSV

Exploit likelihood

What each source reports

Affected products

Affected packages

Public exploits

History

References