Lucene search
GoogleOSV:DSA-1679-1HistoryDec 03, 2008 - 12:00 a.m.
awstats - cross-site scripting
2008-12-0300:00:00
Google
osv.dev
228
0.518 Medium
EPSS
Percentile
97.6%
Morgan Todd discovered a cross-site scripting vulnerability in awstats,
a log file analyzer, involving the “config” request parameter (and
possibly others; CVE-2008-3714).
For the stable distribution (etch), this problem has been fixed in version
6.5+dfsg-1+etch1.
The unstable (sid) and testing (lenny) distribution will be fixed soon.
We recommend that you upgrade your awstats package.
| CPE | Name | Operator | Version |
|---|---|---|---|
| awstats | eq | 6.5+dfsg-1 |
References
Related
openvas
openvas
Fedora Update for awstats FEDORA-2008-7684
2009-02-17 00:00:00
Ubuntu Update for awstats vulnerability USN-686-1
2009-03-23 00:00:00
Fedora Core 10 FEDORA-2009-12444 (awstats)
2009-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: awstats-6.8-2.fc8
2008-09-10 07:05:39
[SECURITY] Fedora 9 Update: awstats-6.8-2.fc9
2008-09-10 06:38:00
[SECURITY] Fedora 10 Update: awstats-6.95-1.fc10
2009-12-01 04:44:02
seebug
seebug
AWStats awstats.pl跨站脚本漏洞
2008-12-05 00:00:00
debian
debian
[SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting
2008-12-03 11:05:53
nessus
nessus
Debian DSA-1679-1 : awstats - XSS
2008-12-04 00:00:00
Fedora 9 : awstats-6.8-2.fc9 (2008-7663)
2008-09-10 00:00:00
Fedora 8 : awstats-6.8-2.fc8 (2008-7684)
2008-09-10 00:00:00
ubuntu
ubuntu
AWStats vulnerability
2008-12-04 00:00:00
redhatcve
redhatcve
CVE-2008-5080
2019-10-04 20:43:23
ubuntucve
ubuntucve
CVE-2008-5080
2008-12-03 00:00:00
CVE-2008-3714
2008-08-19 00:00:00
cvelist
cvelist
CVE-2008-5080
2008-12-03 18:00:00
CVE-2008-3714
2008-08-19 19:10:00
debiancve
debiancve
CVE-2008-5080
2008-12-03 18:30:00
CVE-2008-3714
2008-08-19 19:41:00
cve
cve
CVE-2008-5080
2008-12-03 18:30:00
CVE-2008-3714
2008-08-19 19:41:00
freebsd
freebsd
awstats -- multiple XSS vulnerabilities
2008-03-12 00:00:00
nvd
nvd
CVE-2008-5080
2008-12-03 18:30:00
CVE-2008-3714
2008-08-19 19:41:00
prion
prion
Cross site scripting
2008-12-03 18:30:00
Cross site scripting
2008-08-19 19:41:00
securityvulns
securityvulns