CVE-2012-4547

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors...

CVE-2012-4547

AWStats is affected by cross-site scripting in the awredir.pl component (affecting

Fedora Update for awstats FEDORA-2011-13947

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for awstats FEDORA-2011-13947

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2011-13947 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Awstats Totals <= 1.14 RCE

RCE via sort field Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Fedora Update for awstats FEDORA-2011-14025

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2011-14025 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for awstats FEDORA-2011-13999

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for awstats FEDORA-2011-14025

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 16 Update: awstats-7.0-5.fc16

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

Fedora 16 : awstats-7.0-5.fc16 (2011-13947)

Fixes XSS flaws, sql injection and header response splitting flaw in awredir.pl Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 14 : awstats-7.0-4.fc14 (2011-14025)

Fixes XSS flaws, sql injection and header response splitting flaw in awredir.pl Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 15 Update: awstats-7.0-5.fc15

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

AWStats < 7.1 'awredir.pl' Multiple XSS Vulnerabilities - Active Check

AWStats is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AWStats 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities

This host is running AWStats and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbawstatsawredirmultxssvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ AWStats 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities Authors: Sooraj KS Copyright: Copyrigh...

Multiple vulnerabilities in AWStats

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in AWStats. These are Cross-Site Scripting, Redirector, SQL Injection, HTTP Response Splitting and CRLF Injection vulnerabilities in AWStats in awredir. AWStats includes script Advanced Web Redirector awredir.pl. There were...

AWStats 7.0 / 6.0 SQL Injection / Cross Site Scripting / CRLF Injection

No description provided by source. Vulnerable are all versions of AWStats 6.0, 7.0 and previous versions. ---------- Details: ---------- AWStats includes script Advanced Web Redirector awredir.pl. There were already found by trev and tx XSS and Redirector vulnerabilities in awredir.pl in 2008...

AWStats 7.0 / 6.0 SQL Injection / Cross Site Scripting / CRLF Injection

Hello list! I want to warn you about multiple security vulnerabilities in AWStats. These are Cross-Site Scripting, Redirector, SQL Injection, HTTP Response Splitting and CRLF Injection vulnerabilities in AWStats in awredir. ------------------------- Affected products: -------------------------...

AWStats 6.95/7.0 - 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49749/info AWStats is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

AWStats 6.957.0 - awredir.pl Multiple Cross-Site Scripting Vulnerabilities

AWStats 6.957.0 - awredir.pl Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49749/info AWStats is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these...

http-awstatstotals-exec NSE Script

Exploits a remote code execution vulnerability in Awstats Totals 1.0 up to 1.14 and possibly other products based on it CVE: 2008-3922. This vulnerability can be exploited through the GET variable sort. The script queries the web server with the command payload encoded using PHP's chr function:...