CVEvulnerability
CVE-2006-3681
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-07-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, (2) refererpagesfilterex, (3) urlfilterex, (4) urlfilter, (5) hostfilter, or (6) hostfilterex parameters, a different set of vectors than CVE-2006-1945.
Affected configurations
• awstats awstats (<= 6.5 1.857)
References
- http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19725 Exploit, Vendor Advisory
- http://secunia.com/advisories/22306 secunia.com
- http://www.ubuntu.com/usn/usn-360-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/1421 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25879 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19725 Exploit, Vendor Advisory
- http://secunia.com/advisories/22306 secunia.com
- http://www.ubuntu.com/usn/usn-360-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/1421 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25879 exchange.xforce.ibmcloud.com