CVE-2006-3681
NONE EPSS 78.9%
Published Jul 21, 200619y ago · Modified Jun 16, 20262w ago
Published Jul 21, 2006 19y ago
Last Modified Jun 16, 2026 2w ago
Description
Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, (2) refererpagesfilterex, (3) urlfilterex, (4) urlfilter, (5) hostfilter, or (6) hostfilterex parameters, a different set of vectors than CVE-2006-1945.
Threat Intelligence
EPSS Exploit Probability
78.9% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| awstats | awstats | * | ≤6.5_1.857 |
References 6
- pridels0.blogspot.com http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html
- secunia.com http://secunia.com/advisories/19725
- secunia.com http://secunia.com/advisories/22306
- ubuntu.com http://www.ubuntu.com/usn/usn-360-1
- vupen.com http://www.vupen.com/english/advisories/2006/1421
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/25879
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.