cve-2008-3922

{
  "cvss": 0.0,
  "datePublished": "2020-12-01T00:00:00Z",
  "dateUpdated": "2020-12-01T00:00:00Z",
  "description": "awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.",
  "dueDate": "",
  "id": "CVE-2008-3922",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "awstats_totals",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "telartis_bv awstats_totals Improper Control of Generation of Code",
  "vendor": "telartis_bv"
}