| Package | Affected versions | Patched versions |
|---|---|---|
| awstats | = 6.0= 6.1= 6.2= 6.3= 6.4= 6.5≤ 6.5_1.857 |
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free