CVE-2008-3921

Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter.

Link	Resource
http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt
http://www.telartis.nl/xcms/awstats/	Patch
http://secunia.com/advisories/31630	Vendor Advisory
http://securityreason.com/securityalert/4218
http://www.vupen.com/english/advisories/2008/2442
https://exchange.xforce.ibmcloud.com/vulnerabilities/44706
http://www.securityfocus.com/archive/1/495770/100/0/threaded

Configuration 1

cpe:2.3:a:telartis_bv:awstats_totals:1.11:*:*:*:*:*:*:* cpe:2.3:a:telartis_bv:awstats_totals:1.1:*:*:*:*:*:*:* cpe:2.3:a:telartis_bv:awstats_totals:1.13:*:*:*:*:*:*:* cpe:2.3:a:telartis_bv:awstats_totals:1.14:*:*:*:*:*:*:* cpe:2.3:a:telartis_bv:awstats_totals:1.0:*:*:*:*:*:*:*

---

Published : 2008-09-04 06:41

Updated : 2018-10-11 08:50

---

NVD link : CVE-2008-3921

Mitre link : CVE-2008-3921

No products.

CWE-79