Поиск уязвимостей
Количество 14
Количество 14
ALT-PU-2026-4397
ALT-PU-2026-4397: package `awstats` update to version 8.0-alt0.1
ALT-PU-2023-1396
ALT-PU-2023-1396: package `awstats` update to version 7.9-alt0.1
CVE-2020-29600
In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.
CVE-2020-29600
In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.
CVE-2020-29600
In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute ...
GHSA-43g3-5cf8-2gm2
In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.
CVE-2022-46391
AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.
CVE-2022-46391
AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.
CVE-2022-46391
AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to print ...
CVE-2020-35176
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
CVE-2020-35176
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
CVE-2020-35176
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial a ...
GHSA-j6xf-hwqw-qjg4
AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.
GHSA-6hh4-7wc7-6vq9
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-4397 ALT-PU-2026-4397: package `awstats` update to version 8.0-alt0.1 | CVSS3: 9.8 | 8 месяцев назад | |
| ALT-PU-2023-1396 ALT-PU-2023-1396: package `awstats` update to version 7.9-alt0.1 | CVSS3: 9.8 | больше 3 лет назад | |
 | CVE-2020-29600 In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501. | CVSS3: 9.8 | 4% Низкий | почти 6 лет назад |
 | CVE-2020-29600 In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501. | CVSS3: 9.8 | 4% Низкий | почти 6 лет назад |
| CVE-2020-29600 In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute ... | CVSS3: 9.8 | 4% Низкий | почти 6 лет назад |
| GHSA-43g3-5cf8-2gm2 In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501. | 4% Низкий | больше 4 лет назад | |
| CVE-2022-46391 AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks. | CVSS3: 6.1 | 1% Низкий | почти 4 года назад |
| CVE-2022-46391 AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks. | CVSS3: 6.1 | 1% Низкий | почти 4 года назад |
| CVE-2022-46391 AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to print ... | CVSS3: 6.1 | 1% Низкий | почти 4 года назад |
| CVE-2020-35176 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600. | CVSS3: 5.3 | 2% Низкий | почти 6 лет назад |
| CVE-2020-35176 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600. | CVSS3: 5.3 | 2% Низкий | почти 6 лет назад |
| CVE-2020-35176 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial a ... | CVSS3: 5.3 | 2% Низкий | почти 6 лет назад |
| GHSA-j6xf-hwqw-qjg4 AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks. | CVSS3: 6.1 | 1% Низкий | почти 4 года назад |
| GHSA-6hh4-7wc7-6vq9 In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600. | CVSS3: 5.3 | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу