Vulners
Lucene search
AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | CVE-2006-3682 | 19 Apr 200900:00 | – | circl |
 | CVE-2006-3682 | 18 Jul 200621:00 | – | cve |
 | CVE-2006-3682 | 18 Jul 200621:00 | – | cvelist |
 | CVE-2006-3682 | 18 Jul 200621:00 | – | debiancve |
 | EUVD-2006-3677 | 7 Oct 202500:30 | – | euvd |
 | CVE-2006-3682 | 21 Jul 200614:03 | – | nvd |
 | AWStats < 6.6 'awstats.pl' Multiple Path Disclosure Vulnerability - Active Check | 22 Mar 200900:00 | – | openvas |
| Ubuntu: Security Advisory (USN-360-1) | 26 Aug 202200:00 | – | openvas |
 | DEBIAN-CVE-2006-3682 | 21 Jul 200614:03 | – | osv |
 | Path traversal | 20 Apr 201817:29 | – | prion |
10
source: https://www.securityfocus.com/bid/34159/info
AWStats is prone to a path-disclosure vulnerability.
Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer.
The following are vulnerable:
AWStats 6.5 (build 1.857) and prior
WebGUI Runtime Environment 0.8.x and prior
http://www.example.com/awstats/awstats.pl?config=HACKdestailleur.frData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Apr 2014 00:00Current
6Medium risk
Vulners AI Score6
CVSS 25
EPSS0.09545