Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ccww-jx9f-9pm9

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.

EPSS

Процентиль: 79%
0.01852
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 8 лет назад

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.

CVSS3: 5.3
nvd
больше 8 лет назад

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.

CVSS3: 5.3
debian
больше 8 лет назад

A Full Path Disclosure vulnerability in AWStats through 7.6 allows rem ...

CVSS3: 9.8
altlinux
почти 9 лет назад

ALT-PU-2018-1032: package `awstats` update to version 7.7-alt0.2.20180105

EPSS

Процентиль: 79%
0.01852
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200