CVE-2006-1945

Publication date 20 April 2006

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732.

Status

Package Ubuntu Release Status
awstats 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Fixed 6.5-1ubuntu1.2