DEBIAN-CVE-2008-5080

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting XSS attacks via the querystring parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714...

CVE-2008-5080

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting XSS attacks via the querystring parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714...

Cross site scripting

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting XSS attacks via the querystring parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714...

CVE-2008-5080

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting XSS attacks via the querystring parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714...

CVE-2008-5080

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting XSS attacks via the querystring parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714...

CVE-2008-5080

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting XSS attacks via the querystring parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714...

CVE-2008-5080

AWStats vulnerability CVE-2008-5080 (and related CVE-2008-3714) affects awstats.pl in AWStats 6.8 and earlier, enabling remote XSS via the query_string parameter due to an incomplete fix. Connected advisories (e.g., Ubuntu USN-686-1, Fedora advisories) indicate this requires applying the official...

[SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1679-1 [email protected] http://www.debian.org/security/ Florian Weimer December 03, 2008 http://www.debian.org/security/faq -...

CVE-2008-5080: Improper Neutralization of Input During Web Page Generation

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting XSS attacks via the querystring parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714...

DSA-1679-1 awstats - cross-site scripting

Bulletin has no description...

Gentoo Security Advisory GLSA 200508-07 (awstats)

The remote host is missing updates announced in advisory GLSA 200508-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-36 (awstats)

The remote host is missing updates announced in advisory GLSA 200501-36. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-36 (awstats)

The remote host is missing updates announced in advisory GLSA 200501-36. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200606-06 (awstats)

The remote host is missing updates announced in advisory GLSA 200606-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-06 (awstats)

The remote host is missing updates announced in advisory GLSA 200606-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200508-07 (awstats)

The remote host is missing updates announced in advisory GLSA 200508-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 8 Update: awstats-6.8-2.fc8

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

AWStats Totals (awstatstotals.php sort) Remote Code Execution Exploit

No description provided by source. ?php / Remote Execution Exploit for AWStats Totals vulnerability Interactive Shell Version 2 Updated 05/09/08: The exploit now works with magic quotes on or off Author: Ricardo Almeida email: ricardojbaataeiouDoTpt Greetz The hacker webzine authored by Ronald va...

Fedora 9 : awstats-6.8-2.fc9 (2008-7663)

Add upstream patch for CVE-2008-3714 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora 8 : awstats-6.8-2.fc8 (2008-7684)

Add upstream patch for CVE-2008-3714 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...