690 matches found
Awstats Configuration File Remote Arbitrary Command Execution Vulnerability
Awstats is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user- supplied input. An attacker can exploit this vulnerability to execute arbitrary shell commands in the context of the webserver process. This may help...
Awstats < 7.0 Configuration File Remote Arbitrary Command Execution Vulnerability
Awstats is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution
AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution source: https://www.securityfocus.com/bid/45123/info Awstats is prone to an arbitrary command-execution vulnerability. This issue occurs when Awstats is used along with Apache Tomcat in Microsoft Windows. An attacker can...
AWStats fails to properly handle "\\" when specifying a configuration file directory
Overview AWStats fails to properly handle "\" when specifying a configuration file directory. This could allow an attacker to specify an arbitrary configuration file located on an SMB share. Description From the AWStats project website: "AWStats is a free powerful and featureful tool that...
AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution
source: https://www.securityfocus.com/bid/45123/info Awstats is prone to an arbitrary command-execution vulnerability. This issue occurs when Awstats is used along with Apache Tomcat in Microsoft Windows. An attacker can exploit this vulnerability to execute arbitrary shell commands in the contex...
AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit)
$Id: awstatsmigrateexec.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
awstats -- arbitrary commands execution vulnerability
Awstats change log reports: Security fix Traverse directory of LoadPlugin Security fix Limit config to defined directory to avoid access to external config file via a nfs or webdav link...
AWStats 6.1 < 6.2 - 'configdir' Remote Command Execution (Metasploit)
$Id: awstatsconfigdirexec.rb 7970 2009-12-26 03:31:20Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Fedora Core 12 FEDORA-2009-12370 (awstats)
The remote host is missing an update to awstats announced via advisory FEDORA-2009-12370. OpenVAS Vulnerability Test $Id: fcore200912370.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12370 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 11 FEDORA-2009-12457 (awstats)
The remote host is missing an update to awstats announced via advisory FEDORA-2009-12457. OpenVAS Vulnerability Test $Id: fcore200912457.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12457 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 10 FEDORA-2009-12444 (awstats)
The remote host is missing an update to awstats announced via advisory FEDORA-2009-12444. OpenVAS Vulnerability Test $Id: fcore200912444.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12444 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 11 FEDORA-2009-12457 (awstats)
The remote host is missing an update to awstats announced via advisory FEDORA-2009-12457. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Fedora Core 10 FEDORA-2009-12444 (awstats)
The remote host is missing an update to awstats announced via advisory FEDORA-2009-12444. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Fedora Core 12 FEDORA-2009-12370 (awstats)
The remote host is missing an update to awstats announced via advisory FEDORA-2009-12370. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
AWStats Multiple Unspecified Security Vulnerabilities
AWStats is prone to multiple security vulnerabilities. Very few details are available. We will update this BID as more information emerges. The impact of these issues has not been disclosed. OpenVAS Vulnerability Test $Id: awstats37157.nasl 4574 2016-11-18 13:36:58Z teissa $ AWStats Multiple...
AWStats < 6.95 Multiple Unspecified Security Vulnerabilities
AWStats is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:awstats:awstats";...
AWStats Detection (HTTP)
HTTP based detection of AWStats. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100376";...
AWStats Detection
This host is running AWStats, a free powerful and featureful tool that generates advanced web, streaming, ftp or mail server statistics, graphically. OpenVAS Vulnerability Test $Id: awstatsdetect.nasl 5720 2017-03-24 14:15:57Z cfi $ AWStats Detection Authors: Michael Meyer Copyright: Copyright c...
AWStats < 6.95 awredir.pl Arbitrary Site Redirect
The 'awredir.pl' script, available through the remote web server as part of an AWStats installation, is affected by an open redirect vulnerability. An attacker can exploit this issue to conduct phishing attacks by tricking users into visiting malicious websites. %NASLMINLEVEL 70300 C Tenable...