Astats

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Astats records in CISA KEV

No Astats vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Astatspro 2 records LOW Astats 1 record LOW

Records

3 records

TI-2008-00882 CVE-2008-0918 · GHSA-rf6q-m37m-q323

SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO…

LOW 35

SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to getfile.php,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00905 Published 2008-02-22 No fix listed CWE-89

TI-2008-00805 CVE-2008-0839 · GHSA-gpgm-9mr9-v2qj

SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component…

LOW 35

SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2008-02-20 No fix listed CWE-89

TI-2004-02475 CVE-2004-2605 · GHSA-qr4x-6cmr-2rc9

aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1)…

LOW 11

aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00348 Published 2005-11-29 No fix listed

Open these records in search →

Critical	0
High	2
Medium	0
Low	1
No CVSS	0