Debian/awstats: unknown

Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the query_string, a different vulnerability than CVE-2006-3681

Action: Upgrade awstats to 6.7.dfsg-5.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-3714#Debian:14/awstats
• https://security-tracker.debian.org/tracker/CVE-2008-3714

published 2008-08-19T19:41:00Z · modified 2026-10-23T17:47:40.822081443Z · JSON