CVE-2008-5080

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714.

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=474396	Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432#21
http://secunia.com/advisories/33002
http://www.ubuntu.com/usn/usn-686-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/47116

Configuration 1

cpe:2.3:a:awstats:awstats:5.7:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:6.5:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.9:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:6.1:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:6.2:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.0:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.2:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.6:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.1:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:6.0:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.4:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.3:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.8:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:6.7:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:6.6:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:5.5:*:*:*:*:*:*:* cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*

---

Published : 2008-12-03 06:30

Updated : 2023-02-13 02:19

---

NVD link : CVE-2008-5080

Mitre link : CVE-2008-5080

No products.

CWE-79