Approved changes feed: RSS · Atom
cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Awstats (3e710013-410a-5767-90f2-862ce03a75fd) |
|---|---|
| Product | Awstats (93a7351b-cc26-570c-b281-8fc129ede462) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/awstats |
purl2cpe | 2026-06-01 10:12:42.062561 |
pkg:deb/ubuntu/awstats |
purl2cpe | 2026-06-01 10:12:42.062564 |
pkg:github/eldy/awstats |
purl2cpe | 2026-06-01 10:12:42.062567 |
pkg:rpm/fedora/awstats |
purl2cpe | 2026-06-01 10:12:42.062569 |
pkg:rpm/opensuse/awstats |
purl2cpe | 2026-06-01 10:12:42.062572 |
pkg:sourceforge/awstats |
purl2cpe | 2026-06-01 10:12:42.062575 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-46391 |
vulnerable | 2026-06-08 05:50:38.797983 |
Details available
AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.
Published: 2022-12-04T00:00:00.000Z
Updated: 2025-04-24T15:20:34.836Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35176 |
vulnerable | 2026-06-08 05:25:00.894310 |
Details available
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
Published: 2020-12-11T23:16:22.000Z
Updated: 2024-08-04T17:02:06.840Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29600 |
vulnerable | 2026-06-08 05:24:58.557091 |
Details available
In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.
Published: 2020-12-07T19:52:14.000Z
Updated: 2024-08-04T16:55:10.624Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10245 |
vulnerable | 2026-06-08 05:10:26.509034 |
Details available
A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.
Published: 2018-04-20T17:00:00.000Z
Updated: 2024-09-16T20:32:47.833Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000501 |
vulnerable | 2026-06-08 05:08:34.719262 |
Details available
Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution.
Published: 2018-01-03T15:00:00.000Z
Updated: 2024-08-05T22:00:41.596Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4369 |
vulnerable | 2026-06-08 04:56:27.429441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4368 |
vulnerable | 2026-06-08 04:56:27.421812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4367 |
vulnerable | 2026-06-08 04:56:27.385594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5020 |
vulnerable | 2026-06-08 04:51:50.706322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5080 |
vulnerable | 2026-06-08 04:50:49.424983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3682 |
vulnerable | 2026-06-08 04:49:09.949243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3681 |
vulnerable | 2026-06-08 04:49:09.948823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1945 |
vulnerable | 2026-06-08 04:48:58.471512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2732 |
vulnerable | 2026-06-08 04:48:30.412940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1527 |
vulnerable | 2026-06-08 04:48:26.843022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0116 |
vulnerable | 2026-06-08 04:48:11.427801 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.