690 matches found
Design/Logic Flaw
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
CVE-2009-5020
Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2010-4368
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname...
CVE-2010-4367
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
CVE-2009-5020
Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2010-4368
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname...
CVE-2010-4369
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory...
CVE-2009-5020
AWStats CVE-2009-5020 describes an open redirect in awredir.pl for versions before 6.95, enabling redirects to arbitrary sites and phishing via unspecified vectors. Affected: AWStats (awstats), vulnerability in awredir.pl. Root cause: improper redirect handling in AWStats
CVE-2010-4369
CVE-2010-4369 covers a directory traversal vulnerability in AWStats prior to 7.0, exploitable by remote attackers through a crafted LoadPlugin directory. Public references in OpenVAS and Ubuntu advisories confirm the flaw and patch activity (USN-1047-1; MDVSA-2011:033). The NVD notes an impact as...
CVE-2010-4367
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
CVE-2010-4369
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory...
CVE-2010-4368
AWStats vulnerability CVE-2010-4368 affects awstats.cgi prior to version 7.0 on Windows. The issue arises from accepting a configdir parameter in the URL, allowing a remote attacker to trigger arbitrary commands by pointing to a crafted configuration file on an SMB/UNC share. The base CVSSv2 scor...
CVE-2009-5020
Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2010-4367
CVE-2010-4367 affects AWStats (awstats.cgi) prior to 7.0. The vulnerability arises because a configdir parameter in the URL can be used to reference a crafted configuration file located on a WebDAV or NFS server, enabling remote command execution. Other OpenVAS/NVD entries corroborate the same de...
AWStats 6.95 Command Execution
---------------------------------------------------------------------------- --------- www.ExploitDevelopment.com 2010-WEB-001 CERT VU870532 ---------------------------------------------------------------------------- --------- TITLE: AWStats 6.95 and Older Remote Command Execution When Installed...
CVE-2010-4368: Improper Control of Generation of Code
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname...
CVE-2010-4369: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory...
CVE-2009-5020: Improper Input Validation
Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2010-4369
Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory...
CVE-2010-4367: Improper Control of Generation of Code
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...