CVE-2008-3922
CVSS Score Not Available
91.41%
HIGH RiskEPSS (100th percentile)
awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
Published: 9/4/2008
Modified: 4/9/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
91.41%HIGH Exploitation Risk
100th percentile
This vulnerability has a 91.41% probability of being exploited in the next 30 days, ranking higher than 100% of all scored CVEs.