PT-2012-5474 · Awstats · Awstats

Hanno Böck · Publicado 2012-10-31 · Atualizado 2017-08-29 · CVE-2012-4547

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AWStats versions prior to 7.1

Description There is an unspecified issue in the awredir.pl component of AWStats. The impact and attack vectors of this issue are not clearly defined.

Recommendations For versions prior to 7.1, update to version 7.1 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-4547

Produtos afetados

Awstats

Referências · 10

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4547 · Nota
• http://securityfocus.com/bid/56280 · Nota
• http://openwall.com/lists/oss-security/2012/10/29/7 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4547 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2012-4547 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-4547 · Nota de Segurança
• http://awstats.sourceforge.net/docs/awstats_changelog.txt · Nota
• https://osv.dev/vulnerability/CVE-2012-4547 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79638 · Nota
• http://openwall.com/lists/oss-security/2012/10/26/1 · Nota