Lucene search
HistoryDec 03, 2008 - 6:30 p.m.
CVE-2008-5080
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.518
Percentile
97.6%
awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714.
Affected configurations
Node
awstatsawstatsRange≤6.8
ORawstatsawstatsMatch5.0
ORawstatsawstatsMatch5.1
ORawstatsawstatsMatch5.2
ORawstatsawstatsMatch5.3
ORawstatsawstatsMatch5.4
ORawstatsawstatsMatch5.5
ORawstatsawstatsMatch5.6
ORawstatsawstatsMatch5.7
ORawstatsawstatsMatch5.8
ORawstatsawstatsMatch5.9
ORawstatsawstatsMatch6.0
ORawstatsawstatsMatch6.1
ORawstatsawstatsMatch6.2
ORawstatsawstatsMatch6.3
ORawstatsawstatsMatch6.4
ORawstatsawstatsMatch6.5
ORawstatsawstatsMatch6.6
ORawstatsawstatsMatch6.7
Related
fedora
fedora
[SECURITY] Fedora 8 Update: awstats-6.8-3.fc8
2008-12-08 13:03:12
[SECURITY] Fedora 10 Update: awstats-6.8-3.fc10
2008-12-08 13:04:52
[SECURITY] Fedora 9 Update: awstats-6.8-3.fc9
2008-12-08 13:06:27
openvas
openvas
Fedora Update for awstats FEDORA-2008-10950
2009-02-16 00:00:00
Debian: Security Advisory (DSA-1679-1)
2008-12-10 00:00:00
Ubuntu: Security Advisory (USN-686-1)
2009-03-23 00:00:00
cvelist
cvelist
CVE-2008-5080
2008-12-03 18:00:00
CVE-2008-3714
2008-08-19 19:10:00
ubuntucve
ubuntucve
CVE-2008-5080
2008-12-03 00:00:00
CVE-2008-3714
2008-08-19 00:00:00
ubuntu
ubuntu
AWStats vulnerability
2008-12-04 00:00:00
nessus
nessus
Fedora 10 : awstats-6.8-3.fc10 (2008-10950)
2009-04-23 00:00:00
Fedora 9 : awstats-6.8-3.fc9 (2008-10962)
2008-12-09 00:00:00
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : awstats vulnerability (USN-686-1)
2009-04-23 00:00:00
redhatcve
redhatcve
CVE-2008-5080
2019-10-04 20:43:23
debiancve
debiancve
CVE-2008-5080
2008-12-03 18:30:00
CVE-2008-3714
2008-08-19 19:41:00
cve
cve
CVE-2008-5080
2008-12-03 18:30:00
CVE-2008-3714
2008-08-19 19:41:00
freebsd
freebsd
awstats -- multiple XSS vulnerabilities
2008-03-12 00:00:00
prion
prion
Cross site scripting
2008-12-03 18:30:00
Cross site scripting
2008-08-19 19:41:00
seebug
seebug
AWStats awstats.pl跨站脚本漏洞
2008-12-05 00:00:00
debian
debian
[SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting
2008-12-03 11:05:53
osv
osv
awstats - cross-site scripting
2008-12-03 00:00:00
nvd
nvd
CVE-2008-3714
2008-08-19 19:41:00
securityvulns
securityvulns
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.518
Percentile
97.6%
Related for NVD:CVE-2008-5080