Поиск уязвимостей
Количество 6
Количество 6
CVE-2020-35176
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
CVE-2020-35176
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
CVE-2020-35176
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial a ...
GHSA-6hh4-7wc7-6vq9
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
ALT-PU-2026-4397
ALT-PU-2026-4397: package `awstats` update to version 8.0-alt0.1
ALT-PU-2023-1396
ALT-PU-2023-1396: package `awstats` update to version 7.9-alt0.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-35176 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600. | CVSS3: 5.3 | 2% Низкий | почти 6 лет назад |
 | CVE-2020-35176 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600. | CVSS3: 5.3 | 2% Низкий | почти 6 лет назад |
| CVE-2020-35176 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial a ... | CVSS3: 5.3 | 2% Низкий | почти 6 лет назад |
| GHSA-6hh4-7wc7-6vq9 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600. | CVSS3: 5.3 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2026-4397 ALT-PU-2026-4397: package `awstats` update to version 8.0-alt0.1 | CVSS3: 9.8 | 8 месяцев назад | |
| ALT-PU-2023-1396 ALT-PU-2023-1396: package `awstats` update to version 7.9-alt0.1 | CVSS3: 9.8 | больше 3 лет назад |
Уязвимостей на страницу