| Bug | Description |
|---|
| CVE-2022-46391 | AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to print ... |
| CVE-2020-35176 | In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial a ... |
| CVE-2020-29600 | In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute ... |
| CVE-2017-1000501 | Awstats version 7.6 and earlier is vulnerable to a path traversal flaw ... |
| CVE-2012-4547 | Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unkn ... |
| CVE-2010-4369 | Directory traversal vulnerability in AWStats before 7.0 allows remote ... |
| CVE-2010-4368 | awstats.cgi in AWStats before 7.0 on Windows accepts a configdir param ... |
| CVE-2010-4367 | awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the ... |
| CVE-2009-5020 | Open redirect vulnerability in awredir.pl in AWStats before 6.95 allow ... |
| CVE-2008-5080 | awstats.pl in AWStats 6.8 and earlier does not properly remove quote c ... |
| CVE-2008-3714 | Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 ... |
| CVE-2006-3682 | awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attack ... |
| CVE-2006-3681 | Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in A ... |
| CVE-2006-2644 | AWStats 6.5, and possibly other versions, allows remote authenticated ... |
| CVE-2006-2237 | The web interface for AWStats 6.4 and 6.5, when statistics updates are ... |
| CVE-2006-1945 | Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 ... |
| CVE-2005-1527 | Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, ... |
| CVE-2005-0438 | awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain se ... |
| CVE-2005-0437 | Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 ... |
| CVE-2005-0436 | Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6 ... |
| CVE-2005-0435 | awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read serv ... |
| CVE-2005-0363 | awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute a ... |
| CVE-2005-0362 | awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary ... |
| CVE-2005-0116 | AWStats 6.1, and other versions before 6.3, allows remote attackers to ... |