AWStats 7.8

CPE Details

AWStats 7.8
awstats
awstats
7.8
2020-12-15
13h21 +00:00
2020-12-15
13h21 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:awstats:awstats:7.8:*:*:*:*:*:*:*

Informations

Vendor

awstats

Product

awstats

Version

7.8

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-46391 2022-12-03 23h00 +00:00 AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.
6.1
Medium
CVE-2020-35176 2020-12-11 22h16 +00:00 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
5.3
Medium