Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter.
CPE | Name | Operator | Version |
---|---|---|---|
awstats_totals | eq | 1.11 | |
awstats_totals | eq | 1.1 | |
awstats_totals | eq | 1.13 | |
awstats_totals | eq | 1.14 | |
awstats_totals | eq | 1.0 |