AWStats 5.0 6.3 - logfile File Inclusion Command Execution

AWStats 5.0 6.3 - logfile File Inclusion Command Execution Example: http://target/awstats.pl?filterrawlog=&rawlogmaxlines=5000&config=stats.jdims.info&framename=main&pluginmode=rawlog&log file=/etc/passwd...

AWStats Rawlog Plugin Logfile Parameter Arbitrary Command Execution

Binary data 1728.prm...

Awstats Web Statistics Server Detection

Binary data 2504.prm...

AWStats < 6.6 migrate Variable Command Execution

Binary data 3536.prm...

AWStats Rawlog Plugin Logfile Parameter Input Validation Vulnerability

Description AWStats Rawlog Plugin is reported prone to an input validation vulnerability. The issue is reported to exist because user supplied 'logfile' URI data passed to the 'awstats.pl' script is not sanitized. An attacker may exploit this condition to execute commands remotely or disclose...