Vulnerabilities

TI-2008-03761 CVE-2008-3922 · GHSA-9qqc-cwxq-gc75

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute…

HIGH 72

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymo…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.53202 Published 2008-09-04 No fix listed CWE-94

TI-2008-03760 CVE-2008-3921 · GHSA-cv35-jxpg-6g7r

Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01263 Published 2008-09-04 No fix listed CWE-79

Vulnerabilities

Filters

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute…

Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14…