Approved changes feed: RSS · Atom
cpe:2.3:a:awstats:awstats:6.4_1:sarge1:*:*:*:*:*:*part: a version: 6.4_1 update: sarge1
| Vendor | Awstats (3e710013-410a-5767-90f2-862ce03a75fd) |
|---|---|
| Product | Awstats (93a7351b-cc26-570c-b281-8fc129ede462) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/awstats |
purl2cpe | 2026-06-01 10:12:42.096375 |
pkg:deb/ubuntu/awstats |
purl2cpe | 2026-06-01 10:12:42.096377 |
pkg:github/eldy/awstats |
purl2cpe | 2026-06-01 10:12:42.096379 |
pkg:rpm/fedora/awstats |
purl2cpe | 2026-06-01 10:12:42.096380 |
pkg:rpm/opensuse/awstats |
purl2cpe | 2026-06-01 10:12:42.096382 |
pkg:sourceforge/awstats |
purl2cpe | 2026-06-01 10:12:42.096383 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-4369 |
vulnerable | 2026-06-08 04:56:27.430104 |
Details available
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
Published: 2010-12-02T16:00:00.000Z
Updated: 2024-08-07T03:43:14.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4368 |
vulnerable | 2026-06-08 04:56:27.422290 |
Details available
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.
Published: 2010-12-02T16:00:00.000Z
Updated: 2024-09-16T19:39:59.178Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4367 |
vulnerable | 2026-06-08 04:56:27.414875 |
Details available
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.
Published: 2010-12-02T16:00:00.000Z
Updated: 2024-08-07T03:43:14.839Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2644 |
vulnerable | 2026-06-08 04:49:07.184310 |
Details available
AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive.
Published: 2006-05-30T10:00:00.000Z
Updated: 2024-08-07T17:58:51.684Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.