CVE-2006-1945

NONE EPSS 90.9%

Published Apr 20, 200620y ago · Modified Jun 16, 20262w ago

Published Apr 20, 2006 20y ago

Last Modified Jun 16, 2026 2w ago

Description

Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732.

Threat Intelligence

EPSS Exploit Probability

90.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Affected Products 7

Vendor	Product	Version	Range
awstats	awstats	*	≤6.5_1.857
awstats	awstats	6.0	any
awstats	awstats	6.1	any
awstats	awstats	6.2	any
awstats	awstats	6.3	any
awstats	awstats	6.4	any
awstats	awstats	6.5	any

References 4

pridels0.blogspot.com http://pridels0.blogspot.com/2006/04/awstats-65-vuln.html
secunia.com http://secunia.com/advisories/20496
security.gentoo.org http://security.gentoo.org/glsa/glsa-200606-06.xml
securityfocus.com http://www.securityfocus.com/bid/17621

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.