CVE-2008-3922: Telartis Bv Awstats Totals

High severity, CVSS 9.3. EPSS: 53.2% chance of exploitation in the next 30 days.

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.

Affected products

• Telartis Bv Awstats Totals: version 1.0 only; version 1.1 only; version 1.11 only; version 1.13 only; version 1.14 only

Published 2008-09-04. Last modified 2026-06-16.