CVE-2018-10245

creationtimestamp| type| source ---|---|--- 2025-12-29 02:52:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-10245.yaml 2025-12-30 21:02:57+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbaarkwihw2f...

CVE-2018-10245

A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters...

CVE-2018-10245

CVE-2018-10245 affects AWStats; the flaw is a full path disclosure caused by improper handling of framename and update parameters in awstats.pl, enabling remote attackers to determine server file paths. The related nuclei template confirms the issue for AWStats