CVE-2008-5080

EPSS 0.40%

發布日:2008/12/3修改日:2026/4/28

也稱為:DEBIAN-CVE-2008-5080

描述

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714.

受影響套件(1)

Debian/awstatsfrom 0, < 6.7.dfsg-5.1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-5080