AWStats Totals Code Execution and Cross Ste Scripting Vulnerabilities

Multiple vulnerabilities have been identified in AWStats Totals, which could be exploited by remote attackers to execute arbitrary commands or scripting code.

1. An input validation errors when processing the "month" and "year" parameters, which could be exploited by attackers to cause malicious scripting code to be executed by the user's browser.

2. An input validation error in the "multisort()" function when processing the "sort" parameter, which could be exploited by attackers to execute arbitrary PHP code with the privileges of the web server.