Описание
AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message.
Уязвимые конфигурации
Конфигурация 1Версия до 6.4 (включая)
cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.01742
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
debian
почти 21 год назад
AWStats 6.4, and possibly earlier versions, allows remote attackers to ...
github
больше 4 лет назад
AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message.
EPSS
Процентиль: 76%
0.01742
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other