AWStats 7.7

CPE Details

AWStats 7.7
awstats
awstats
7.7
2019-07-25
13h32 +00:00
2019-07-25
13h32 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:awstats:awstats:7.7:*:*:*:*:*:*:*

Informations

Vendor

awstats

Product

awstats

Version

7.7

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-46391 2022-12-03 23h00 +00:00 AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.
6.1
Moyen
CVE-2020-35176 2020-12-11 22h16 +00:00 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
5.3
Moyen
CVE-2020-29600 2020-12-07 18h52 +00:00 In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.
9.8
Critique