Описание
AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message.
Уязвимые конфигурации
Конфигурация 1Версия до 6.4 (включая)
cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00346
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
debian
около 20 лет назад
AWStats 6.4, and possibly earlier versions, allows remote attackers to ...
github
больше 3 лет назад
AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message.
EPSS
Процентиль: 57%
0.00346
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other