CVE-2010-4368

awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname...

CVE-2010-4367: Improper Control of Generation of Code

awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...

PT-2010-5445

Name of the Vulnerable Software and Affected Versions AWStats versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary commands by providing a crafted configuration file located at a UNC share pathname through the configdir parameter in the URL of the awstats.cgi...

CVE-2010-4368: Improper Control of Generation of Code

awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname...