AWStats < 7.1 'awredir.pl' Multiple XSS Vulnerabilities - Active Check

AWStats is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AWStats 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities

This host is running AWStats and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbawstatsawredirmultxssvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ AWStats 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities Authors: Sooraj KS Copyright: Copyrigh...

Multiple vulnerabilities in AWStats

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in AWStats. These are Cross-Site Scripting, Redirector, SQL Injection, HTTP Response Splitting and CRLF Injection vulnerabilities in AWStats in awredir. AWStats includes script Advanced Web Redirector awredir.pl. There were...

AWStats 7.0 / 6.0 SQL Injection / Cross Site Scripting / CRLF Injection

No description provided by source. Vulnerable are all versions of AWStats 6.0, 7.0 and previous versions. ---------- Details: ---------- AWStats includes script Advanced Web Redirector awredir.pl. There were already found by trev and tx XSS and Redirector vulnerabilities in awredir.pl in 2008...

AWStats 7.0 / 6.0 SQL Injection / Cross Site Scripting / CRLF Injection

Hello list! I want to warn you about multiple security vulnerabilities in AWStats. These are Cross-Site Scripting, Redirector, SQL Injection, HTTP Response Splitting and CRLF Injection vulnerabilities in AWStats in awredir. ------------------------- Affected products: -------------------------...

AWStats 6.95/7.0 - 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49749/info AWStats is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

AWStats 6.957.0 - awredir.pl Multiple Cross-Site Scripting Vulnerabilities

AWStats 6.957.0 - awredir.pl Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49749/info AWStats is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these...

http-awstatstotals-exec NSE Script

Exploits a remote code execution vulnerability in Awstats Totals 1.0 up to 1.14 and possibly other products based on it CVE: 2008-3922. This vulnerability can be exploited through the GET variable sort. The script queries the web server with the command payload encoded using PHP's chr function:...

AWStats Totals < 1.15 'sort' Parameter RCE Vulnerabilities - Active Check

AWStats Totals is prone to remote command execution RCE vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AWStats Totals 1.14 Remote Command Execution

$Id: awstatstotalsmultisort.rb 12715 2011-05-25 10:45:36Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

AWStats Totals =< v1.14 multisort Remote Command Execution

Exploit for php platform in category web applications $Id: awstatstotalsmultisort.rb 12715 2011-05-25 10:45:36Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

AWStats Totals 1.14 multisort - Remote Command Execution (Metasploit)

$Id: awstatstotalsmultisort.rb 12715 2011-05-25 10:45:36Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FreeBSD Ports: awstats

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: awstats

The remote host is missing an update to the system as announced in the referenced advisory. VID ce6ce2f8-34ac-11e0-8103-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID ce6ce2f8-34ac-11e0-8103-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Mandriva Update for awstats MDVSA-2011:033 (awstats)

Check for the Version of awstats OpenVAS Vulnerability Test Mandriva Update for awstats MDVSA-2011:033 awstats Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for awstats MDVSA-2011:033 (awstats)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD : awstats -- arbitrary commands execution vulnerability (ce6ce2f8-34ac-11e0-8103-00215c6a37bb)

Awstats change log reports : - Security fix Traverse directory of LoadPlugin - Security fix Limit config to defined directory to avoid access to external config file via a nfs or webdav link. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

Ubuntu Update for awstats vulnerability USN-1047-1

Ubuntu Update for Linux kernel vulnerabilities USN-1047-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10471.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for awstats vulnerability USN-1047-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1047-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : awstats vulnerability (USN-1047-1)

It was discovered that AWStats did not correctly filter the LoadPlugin configuration option. A local attacker on a shared system could use this to inject arbitrary code into AWStats. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...