CVE-2006-1945
awstats - programming error
EPSS 3.8%
Description
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732.
How to fix CVE-2006-1945
To remediate CVE-2006-1945, upgrade the affected package to a fixed version below.
- Debian/awstats—upgrade to 6.5-2 or later
- Debian/awstats—upgrade to 6.4-1sarge3 or later
Is CVE-2006-1945 being exploited?
Low — EPSS is 3.8%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 6.5-2
- from 0, < 6.4-1sarge3