Awstats vulnerabilities

Products

• Awstats 26

Newest

• awstats, debian linux +1 more AWStats 8.0 is vulnerable to Command Injection via the open function CVE-2025-63261 Fix available 7.8 HighMarch 20, 2026
• awstats, debian linux, fedoraproject fedora +2 more AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net:... CVE-2022-46391 Fix available 6.1 MediumDecember 4, 2022
• awstats, debian linux, fedoraproject fedora +2 more In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting... CVE-2020-35176 Fix available 5.3 MediumDecember 11, 2020
• awstats, debian linux, fedoraproject fedora +2 more In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it... CVE-2020-29600 Fix available 9.8 CriticalDecember 7, 2020
• awstats A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where... CVE-2018-10245 5.3 MediumApril 20, 2018
• awstats, debian linux +1 more Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the ... CVE-2017-1000501 Fix available 9.8 CriticalJanuary 3, 2018
• awstats Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an... CVE-2010-4369 Fix available 6.4 MediumDecember 2, 2010
• awstats awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which... CVE-2010-4368 7.5 HighDecember 2, 2010
• awstats awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote... CVE-2010-4367 Public exploitFix available EPSS 27.2% 7.5 HighDecember 2, 2010
• awstats Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to... CVE-2009-5020 Fix available 5.8 MediumDecember 2, 2010
• awstats awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows... CVE-2008-5080 Fix available 4.3 MediumDecember 3, 2008
• awstats Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to... CVE-2008-3714 Public exploitFix available 4.3 MediumAugust 19, 2008
• awstats awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the... CVE-2006-3682 Public exploitFix available 5.0 MediumJuly 18, 2006
• awstats Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and... CVE-2006-3681 Fix available 2.6 LowJuly 18, 2006
• awstats AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary... CVE-2006-2644 Fix available 4.0 MediumMay 26, 2006
• awstats The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote... CVE-2006-2237 Public exploitFix available EPSS 59.1% 5.1 MediumMay 8, 2006
• awstats Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote... CVE-2006-1945 Public exploitFix available 2.6 LowApril 20, 2006
• awstats AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive... CVE-2005-2732 5.0 MediumAugust 29, 2005
• awstats, canonical ubuntu linux, debian linux +2 more Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is... CVE-2005-1527 Fix available 5.0 MediumAugust 15, 2005
• awstats awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by... CVE-2005-0438 Public exploitFix available 5.0 MediumFebruary 15, 2005
• awstats Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to... CVE-2005-0437 Fix available 7.5 HighFebruary 15, 2005
• awstats Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers... CVE-2005-0436 Public exploitFix available 7.5 HighFebruary 15, 2005
• awstats awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the... CVE-2005-0435 Public exploitFix available 5.0 MediumFebruary 15, 2005
• awstats awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell... CVE-2005-0363 Fix available 7.5 HighFebruary 15, 2005
• awstats awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell... CVE-2005-0362 Fix available 4.6 MediumFebruary 9, 2005
• awstats AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands... CVE-2005-0116 Public exploitFix available EPSS 74.9% 7.5 HighJanuary 18, 2005