Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-3922
HistorySep 04, 2008 - 6:41 p.m.

CVE-2008-3922

2008-09-0418:41:00
CWE-94
[email protected]
web.nvd.nist.gov
6

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.962

Percentile

99.5%

JSON

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.

Affected configurations

Nvd
Node
telartis_bvawstats_totalsMatch1.0
OR
telartis_bvawstats_totalsMatch1.1
OR
telartis_bvawstats_totalsMatch1.11
OR
telartis_bvawstats_totalsMatch1.13
OR
telartis_bvawstats_totalsMatch1.14

Related

packetstorm 1
cve 1
prion 1
dsquare 1
checkpoint_advisories 1
openvas 1
metasploit 1
cvelist 1
nessus 1
exploitdb 1
nmap 1
packetstorm
packetstorm
AWStats Totals 1.14 Remote Command Execution
2011-05-26 00:00:00
cve
cve
CVE-2008-3922
2008-09-04 18:41:00
prion
prion
Code injection
2008-09-04 18:41:00
dsquare
dsquare
Awstats Totals <= 1.14 RCE
2012-01-26 00:00:00
checkpoint_advisories
checkpoint_advisories
AWStats Totals awstatstotals.php sort Parameter Code Execution (CVE-2008-3922)
2016-04-03 00:00:00
openvas
openvas
AWStats Totals 'sort' Parameter RCE Vulnerabilities
2011-06-07 00:00:00
metasploit
metasploit
AWStats Totals multisort Remote Command Execution
2011-05-25 10:42:37
cvelist
cvelist
CVE-2008-3922
2008-09-04 18:00:00
nessus
nessus
AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution
2008-08-27 00:00:00
exploitdb
exploitdb
AWStats Totals 1.14 multisort - Remote Command Execution (Metasploit)
2011-05-25 00:00:00
nmap
nmap
http-awstatstotals-exec NSE Script
2011-08-23 06:29:12

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.962

Percentile

99.5%

JSON
Related for NVD:CVE-2008-3922
packetstorm1cve1prion1dsquare1checkpoint_advisories1openvas1metasploit1cvelist1nessus1exploitdb1nmap1