tocsin

Debian/awstats: unknown

Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same

Action: Upgrade awstats to 6.5-2 or later.

Affected

introducedfixedlast affected
06.5-2-

Fixed versions

6.5-2

Sources

published · modified · JSON