4 matches found
MGASA-2022-0461 Updated awstats packages fix security vulnerability
AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks. CVE-2022-46391...
6.1CVSS5.9AI score0.00655EPSS
SaveExploits0References3
DLA-3225-1 awstats - security update
Bulletin has no description...
6.1CVSS6.1AI score0.00655EPSS
SaveExploits0
DLA-1238-1 awstats - security update
Bulletin has no description...
9.8CVSS7AI score0.04352EPSS
SaveExploits0
MGASA-2018-0045 Updated awstats packages fix security vulnerability
The cPanel Security Team discovered two path traversal flaws in awstats in the "config" and "migrate" parameters that could be leveraged for unauthenticated remote code execution CVE-2017-1000501...
9.8CVSS7.7AI score0.04352EPSS
SaveExploits0References3
20