Awstats

Awstats is a widely deployed open-source web analytics and log-analysis tool whose single-product footprint belies significant reach across hosting providers, content management systems, and web servers. Vulnerabilities affecting the product skew toward moderate severity and frequently acquire public exploit code, consistent with the tool's web-facing role and its exposure to direct user input through log parsing and report generation. The recurring weakness classes center on input-handling failures—path traversal, code injection, cross-site scripting, and improper input validation—reflecting the demands of safely processing and rendering log data from untrusted sources without sanitization. Defenders should treat Awstats instances, particularly those exposed to the internet or accepting user-controlled log input, as requiring close patch monitoring and input-filtering controls; live severity, exploitation, and exposure counts are shown alongside this summary.