The cPanel Security Team discovered two path traversal flaws in awstats in the “config” and “migrate” parameters that could be leveraged for unauthenticated remote code execution (CVE-2017-1000501).
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 5 | noarch | awstats | < 7.3-3.1 | awstats-7.3-3.1.mga5 |
Mageia | 6 | noarch | awstats | < 7.5-1.1 | awstats-7.5-1.1.mga6 |