Debian Security Advisory 1679-1 – Morgan Todd discovered a cross-site scripting vulnerability in awstats, a log file analyzer, involving the “config” request parameter (and possibly others; CVE-2008-3714).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72590/dsa-1679-1.txt
Source: https://packetstormsecurity.com/files/72590/Debian-Linux-Security-Advisory-1679-1.html