CVE-2008-5080

Source
https://cve.org/CVERecord?id=CVE-2008-5080
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2008-5080.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2008-5080
Downstream
Published
2008-12-03T18:30:00Z
Modified
2026-04-10T03:40:18.748621Z
Summary
[none]
Details

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714.

References

Affected packages