GCVE - cpe:2.3:a:telartis_bv:awstats_totals:1.14:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:telartis_bv:awstats_totals:1.14:*:*:*:*:*:*:*

part: a version: 1.14 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/telartis/awstatstotals`	purl2cpe	2026-06-01 10:12:18.443982

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3922`	vulnerable	2026-06-08 04:50:37.215862	Details available awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function. Published: 2008-09-04T18:00:00.000Z Updated: 2024-08-07T10:00:41.846Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/6368 http://www.exploit-db.com/exploits/17324 http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt http://www.telartis.nl/xcms/awstats/ https://exchange.xforce.ibmcloud.com/vulnerabilities/44712	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3921`	vulnerable	2026-06-08 04:50:37.215270	Details available Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter. Published: 2008-09-04T18:00:00.000Z Updated: 2024-08-07T10:00:41.117Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/44706 http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt http://www.telartis.nl/xcms/awstats/ http://securityreason.com/securityalert/4218 http://www.vupen.com/english/advisories/2008/2442	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.