660 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732...
CVE-2006-1945
Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732...
DEBIAN-CVE-2006-1945
Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732...
CVE-2006-1945
CVE-2006-1945 is an XSS vulnerability in AWStats 6.5 and earlier, affecting awstats.pl via the config parameter. An attacker could inject arbitrary web script or HTML. The description notes a possible correlation with CVE-2005-2732, but no explicit remediation details are provided in the document...
CVE-2006-1945
Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732...
CVE-2006-1945
Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732...
AWStats 4.05.x6.x - AWStats.pl Multiple Cross-Site Scripting Vulnerabilities
AWStats 4.05.x6.x - AWStats.pl Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17621/info AWStats is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
AWStats 6.5 vuln.
AWStats 6.5 vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://awstats.sourceforge.net affected versions:AWStats 6.5 build 1.857 and previous orginal advisory:http://pridels.blogspot.com/2006/04/awstats-65-vuln.html Vuln. Description: AWStats contains a flaw that allows a remot...
AWStats 4.0/5.x/6.x - AWStats.pl Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/17621/info AWStats is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...
AWStats < 6.4 (referer) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl AWStats 6.4 command execution exploit based on http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities coded by 1dt.w0lf 11.08.2005 RST/GHC http://rst.void.ru http://ghc.ru Note Exploitation will not occur until the stats page...
AWStats < 6.4 (referer) Remote Command Execution Exploit
Exploit for cgi platform in category web applications ======================================================== AWStats new or die; $req = HTTP::Request-newGET = $path; $req-refererqqhttp://'.system$FilterEx'refererpages'.'; $res = $aw-request$req; $aw = LWP::UserAgent-new or die; $res =...
AWStats 6.4 - referer Remote Command Execution
AWStats 6.4 - referer Remote Command Execution !/usr/bin/perl AWStats new or die; $req = HTTP::Request-newGET = $path; $req-refererqqhttp://'.system$FilterEx'refererpages'.'; $res = $aw-request$req; $aw = LWP::UserAgent-new or die; $res = $aw-get$path.'?output=refererpages&update=1'; while print...
AWStats < 6.4 - 'referer' Remote Command Execution
!/usr/bin/perl AWStats new or die; $req = HTTP::Request-newGET = $path; $req-refererqqhttp://'.system$FilterEx'refererpages'.'; $res = $aw-request$req; $aw = LWP::UserAgent-new or die; $res = $aw-get$path.'?output=refererpages&update=1'; while print "Type command for execute or 'q' for exit ";...
AWStats configdir parameter command execution
Added: 02/14/2006 CVE: CVE-2005-0116 BID: 12298 OSVDB: 13002 Background AWStats is a web application for showing web, FTP, and mail server statistics. Problem Insufficient validation of the configdir parameter before being used in a PERL open call leads to remote command execution. Resolution...
AWStats configdir parameter command execution
Added: 02/14/2006 CVE: CVE-2005-0116 BID: 12298 OSVDB: 13002 Background AWStats is a web application for showing web, FTP, and mail server statistics. Problem Insufficient validation of the configdir parameter before being used in a PERL open call leads to remote command execution. Resolution...
AWStats configdir parameter command execution
Added: 02/14/2006 CVE: CVE-2005-0116 BID: 12298 OSVDB: 13002 Background AWStats is a web application for showing web, FTP, and mail server statistics. Problem Insufficient validation of the configdir parameter before being used in a PERL open call leads to remote command execution. Resolution...
AWStats configdir parameter command execution
Added: 02/14/2006 CVE: CVE-2005-0116 BID: 12298 OSVDB: 13002 Background AWStats is a web application for showing web, FTP, and mail server statistics. Problem Insufficient validation of the configdir parameter before being used in a PERL open call leads to remote command execution. Resolution...
Ubuntu 5.04 : awstats vulnerability (USN-167-1)
Peter Vreugdenhil discovered a command injection vulnerability in AWStats. As part of the statistics reporting function, AWStats displays information about the most common referrer values that caused users to visit the website. Referer URLs could be crafted in a way that they contained arbitrary...
[SECURITY] [DSA 892-1] New awstats packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 892-1 [email protected] http://www.debian.org/security/ Martin Schulze November 10th, 2005 http://www.debian.org/security/faq -...