Debian/awstats: unknown

Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, (

Action: Upgrade awstats to 6.5-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-3681
• https://security-tracker.debian.org/tracker/CVE-2006-3681

published 2006-07-21T14:03:00Z · modified 2026-10-22T23:47:22.158675449Z · JSON