Lucene search
K

CVE-2020-29600

🗓️ 07 Dec 2020 19:52:14Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 115 Views🌐 WEB

AWStats through 7.7, cgi-bin/awstats.pl?config= accepts absolute pathnam

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
AlpineLinux
CVE-2020-29600
7 Dec 202019:52
alpinelinux
Circl
CVE-2020-29600
7 Dec 202022:30
circl
CNNVD
Eldy Awstats Path Traversal Vulnerability
7 Dec 202000:00
cnnvd
Cvelist
CVE-2020-29600
7 Dec 202019:52
cvelist
Debian
[SECURITY] [DLA 2506-1] awstats security update
23 Dec 202015:18
debian
Debian CVE
CVE-2020-29600
7 Dec 202019:52
debiancve
Tenable Nessus
Debian DLA-2506-1 : awstats security update
24 Dec 202000:00
nessus
Tenable Nessus
Fedora 32 : awstats (2020-d1aa0e030c)
11 Jan 202100:00
nessus
Tenable Nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : AWStats vulnerabilities (USN-4953-1)
14 May 202100:00
nessus
EUVD
EUVD-2020-21961
7 Oct 202500:30
euvd
Rows per page
NVD
Node
awstatsawstatsRange7.7
Node
ParameterPositionPathDescriptionCWE
configquery paramcgi-bin/awstats.pl?config=AWStats cgi-bin/awstats.pl accepts an absolute pathname via the config parameter, enabling path traversal to read arbitrary files.CWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:24Current
7High risk
Vulners AI Score7
CVSS 27.5
CVSS 3.19.8
EPSS0.01743
115