CVE-2010-4369
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an...
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
- Record
CVE-2010-4369- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
- Record
CVE-2010-4369- Updated
- 2026-11-02
EUVDEUVD-2010-4338 No score
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
- Record
EUVD-2010-4338- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v355-j978-c759 No score
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an...
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
- Record
GHSA-v355-j978-c759- Weakness
- CWE-22
- Updated
- 2026-11-02
OSV No score
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
- Record
CVE-2010-4369- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4369 No score
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
- Record
DEBIAN-CVE-2010-4369- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4369 is a medium vulnerability (CVSS 6.4) in Awstats, published December 2, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.67%, the 85th percentile. Fixed in awstats 6.9.5~dfsg-5.
References
vupen.com/english/advisories/2011/0202
securityfocus.com/bid/45210
mandriva.com/security/advisories?name=MDVSA-2011:033
ubuntu.com/usn/USN-1047-1
secunia.com/advisories/43004
awstats.sourceforge.net/docs/awstats_changelog.txt
nvd.nist.gov/vuln/detail/CVE-2010-4369
github.com/advisories/GHSA-v355-j978-c759
security-tracker.debian.org/tracker/CVE-2010-4369