Vulnerability Details CVE-2006-3682
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.086
EPSS Ranking 92.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html
- http://secunia.com/advisories/19725
- http://secunia.com/advisories/22306
- http://www.ubuntu.com/usn/usn-360-1
- http://www.vupen.com/english/advisories/2006/1421
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25880
- http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html
- http://secunia.com/advisories/19725
- http://secunia.com/advisories/22306
- http://www.ubuntu.com/usn/usn-360-1
- http://www.vupen.com/english/advisories/2006/1421
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25880
Products affected by CVE-2006-3682
-
cpe:2.3:a:awstats:awstats:1.0
-
cpe:2.3:a:awstats:awstats:4.0
-
cpe:2.3:a:awstats:awstats:4.1
-
cpe:2.3:a:awstats:awstats:5.0
-
cpe:2.3:a:awstats:awstats:5.1
-
cpe:2.3:a:awstats:awstats:5.2
-
cpe:2.3:a:awstats:awstats:5.3
-
cpe:2.3:a:awstats:awstats:5.4
-
cpe:2.3:a:awstats:awstats:5.5
-
cpe:2.3:a:awstats:awstats:5.6
-
cpe:2.3:a:awstats:awstats:5.7
-
cpe:2.3:a:awstats:awstats:5.8
-
cpe:2.3:a:awstats:awstats:5.9
-
cpe:2.3:a:awstats:awstats:6.0
-
cpe:2.3:a:awstats:awstats:6.1
-
cpe:2.3:a:awstats:awstats:6.2
-
cpe:2.3:a:awstats:awstats:6.3
-
cpe:2.3:a:awstats:awstats:6.4
-
cpe:2.3:a:awstats:awstats:6.5