CVE-2009-5020

AWStats CVE-2009-5020 describes an open redirect in awredir.pl for versions before 6.95, enabling redirects to arbitrary sites and phishing via unspecified vectors. Affected: AWStats (awstats), vulnerability in awredir.pl. Root cause: improper redirect handling in AWStats

CVE-2010-4369

CVE-2010-4369 covers a directory traversal vulnerability in AWStats prior to 7.0, exploitable by remote attackers through a crafted LoadPlugin directory. Public references in OpenVAS and Ubuntu advisories confirm the flaw and patch activity (USN-1047-1; MDVSA-2011:033). The NVD notes an impact as...

CVE-2010-4367

awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...

CVE-2010-4369

Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory...

CVE-2010-4368

AWStats vulnerability CVE-2010-4368 affects awstats.cgi prior to version 7.0 on Windows. The issue arises from accepting a configdir parameter in the URL, allowing a remote attacker to trigger arbitrary commands by pointing to a crafted configuration file on an SMB/UNC share. The base CVSSv2 scor...

CVE-2010-4367

CVE-2010-4367 affects AWStats (awstats.cgi) prior to 7.0. The vulnerability arises because a configdir parameter in the URL can be used to reference a crafted configuration file located on a WebDAV or NFS server, enabling remote command execution. Other OpenVAS/NVD entries corroborate the same de...

CVE-2009-5020

Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

AWStats 6.95 Command Execution

---------------------------------------------------------------------------- --------- www.ExploitDevelopment.com 2010-WEB-001 CERT VU870532 ---------------------------------------------------------------------------- --------- TITLE: AWStats 6.95 and Older Remote Command Execution When Installed...

CVE-2010-4369

Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory...

Awstats Configuration File Remote Arbitrary Command Execution Vulnerability

Awstats is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user- supplied input. An attacker can exploit this vulnerability to execute arbitrary shell commands in the context of the webserver process. This may help...

Awstats < 7.0 Configuration File Remote Arbitrary Command Execution Vulnerability

Awstats is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution

AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution source: https://www.securityfocus.com/bid/45123/info Awstats is prone to an arbitrary command-execution vulnerability. This issue occurs when Awstats is used along with Apache Tomcat in Microsoft Windows. An attacker can...

AWStats fails to properly handle "\\" when specifying a configuration file directory

Overview AWStats fails to properly handle "\" when specifying a configuration file directory. This could allow an attacker to specify an arbitrary configuration file located on an SMB share. Description From the AWStats project website: "AWStats is a free powerful and featureful tool that...

AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution

source: https://www.securityfocus.com/bid/45123/info Awstats is prone to an arbitrary command-execution vulnerability. This issue occurs when Awstats is used along with Apache Tomcat in Microsoft Windows. An attacker can exploit this vulnerability to execute arbitrary shell commands in the contex...

AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit)

$Id: awstatsmigrateexec.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

awstats -- arbitrary commands execution vulnerability

Awstats change log reports: Security fix Traverse directory of LoadPlugin Security fix Limit config to defined directory to avoid access to external config file via a nfs or webdav link...

AWStats 6.1 < 6.2 - 'configdir' Remote Command Execution (Metasploit)

$Id: awstatsconfigdirexec.rb 7970 2009-12-26 03:31:20Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora Core 12 FEDORA-2009-12370 (awstats)

The remote host is missing an update to awstats announced via advisory FEDORA-2009-12370. OpenVAS Vulnerability Test $Id: fcore200912370.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12370 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-12444 (awstats)

The remote host is missing an update to awstats announced via advisory FEDORA-2009-12444. OpenVAS Vulnerability Test $Id: fcore200912444.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12444 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-12457 (awstats)

The remote host is missing an update to awstats announced via advisory FEDORA-2009-12457. OpenVAS Vulnerability Test $Id: fcore200912457.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12457 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...