Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-5080
HistoryDec 03, 2008 - 6:30 p.m.

CVE-2008-5080

2008-12-0318:30:00
CWE-79
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.518 Medium

EPSS

Percentile

97.6%

JSON

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714.

Affected configurations

NVD
Node
awstatsawstatsRange≤6.8
OR
awstatsawstatsMatch5.0
OR
awstatsawstatsMatch5.1
OR
awstatsawstatsMatch5.2
OR
awstatsawstatsMatch5.3
OR
awstatsawstatsMatch5.4
OR
awstatsawstatsMatch5.5
OR
awstatsawstatsMatch5.6
OR
awstatsawstatsMatch5.7
OR
awstatsawstatsMatch5.8
OR
awstatsawstatsMatch5.9
OR
awstatsawstatsMatch6.0
OR
awstatsawstatsMatch6.1
OR
awstatsawstatsMatch6.2
OR
awstatsawstatsMatch6.3
OR
awstatsawstatsMatch6.4
OR
awstatsawstatsMatch6.5
OR
awstatsawstatsMatch6.6
OR
awstatsawstatsMatch6.7

Related

cve 2
freebsd 1
nessus 8
openvas 21
ubuntu 1
fedora 6
ubuntucve 2
redhatcve 1
cvelist 2
debiancve 2
prion 2
debian 1
osv 1
seebug 1
nvd 1
securityvulns 1
cve
cve
CVE-2008-5080
2008-12-03 18:30:00
CVE-2008-3714
2008-08-19 19:41:00
freebsd
freebsd
awstats -- multiple XSS vulnerabilities
2008-03-12 00:00:00
nessus
nessus
Fedora 9 : awstats-6.8-3.fc9 (2008-10962)
2008-12-09 00:00:00
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : awstats vulnerability (USN-686-1)
2009-04-23 00:00:00
Fedora 10 : awstats-6.8-3.fc10 (2008-10950)
2009-04-23 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:266 (awstats)
2009-10-19 00:00:00
Fedora Update for awstats FEDORA-2008-10938
2009-02-16 00:00:00
Fedora Update for awstats FEDORA-2008-10962
2009-02-16 00:00:00
ubuntu
ubuntu
AWStats vulnerability
2008-12-04 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: awstats-6.8-3.fc10
2008-12-08 13:04:52
[SECURITY] Fedora 8 Update: awstats-6.8-3.fc8
2008-12-08 13:03:12
[SECURITY] Fedora 9 Update: awstats-6.8-3.fc9
2008-12-08 13:06:27
ubuntucve
ubuntucve
CVE-2008-5080
2008-12-03 00:00:00
CVE-2008-3714
2008-08-19 00:00:00
redhatcve
redhatcve
CVE-2008-5080
2019-10-04 20:43:23
cvelist
cvelist
CVE-2008-5080
2008-12-03 18:00:00
CVE-2008-3714
2008-08-19 19:10:00
debiancve
debiancve
CVE-2008-5080
2008-12-03 18:30:00
CVE-2008-3714
2008-08-19 19:41:00
prion
prion
Cross site scripting
2008-12-03 18:30:00
Cross site scripting
2008-08-19 19:41:00
debian
debian
[SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting
2008-12-03 11:05:53
osv
osv
awstats - cross-site scripting
2008-12-03 00:00:00
seebug
seebug
AWStats awstats.pl跨站脚本漏洞
2008-12-05 00:00:00
nvd
nvd
CVE-2008-3714
2008-08-19 19:41:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-09-24 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.518 Medium

EPSS

Percentile

97.6%

JSON
Related for NVD:CVE-2008-5080
cve2freebsd1nessus8openvas21ubuntu1fedora6ubuntucve2redhatcve1cvelist2debiancve2prion2debian1osv1seebug1nvd1securityvulns1