Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ccww-jx9f-9pm9

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.

EPSS

Процентиль: 30%
0.00111
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 8 лет назад

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.

CVSS3: 5.3
nvd
почти 8 лет назад

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.

CVSS3: 5.3
debian
почти 8 лет назад

A Full Path Disclosure vulnerability in AWStats through 7.6 allows rem ...

EPSS

Процентиль: 30%
0.00111
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200