awstats vulnerabilities (Debian)
25 vulnerabilities.
-
awstatsDebian AWStats 8.0 is vulnerable to Command Injection via the open function 7.8 High -
awstatsDebian AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net:... 6.1 Medium -
awstatsDebian In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting... 5.3 Medium -
awstatsDebian In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it... 9.8 Critical -
awstatsDebian A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where... 5.3 Medium -
awstatsDebian Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the ... 9.8 Critical -
awstatsDebian Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors. 4.3 Medium -
awstatsDebian Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an... 6.4 Medium -
awstatsDebian awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote... 7.5 High -
awstatsDebian Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to... 5.8 Medium -
awstatsDebian awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows... 4.3 Medium -
awstatsDebian Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to... 4.3 Medium -
awstatsDebian awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the... 5.0 Medium -
awstatsDebian Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and... 2.6 Low -
awstatsDebian AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary... 4.0 Medium -
awstatsDebian The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote... 5.1 Medium -
awstatsDebian Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote... 2.6 Low -
awstatsDebian Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is... 5.0 Medium -
awstatsDebian awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by... 5.0 Medium -
awstatsDebian Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to... 7.5 High -
awstatsDebian Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers... 7.5 High -
awstatsDebian awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the... 5.0 Medium -
awstatsDebian awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell... 7.5 High -
awstatsDebian awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell... 4.6 Medium -
awstatsDebian AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands... 7.5 High