AWStats Totals - sort Parameter RCE Detection (CVE-2008-3922)

Detects CVE-2008-3922 by requesting awstatstotals.php?sort=.phpinfo.exit.$a and matching phpinfo output. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2008-3922 by requesting awstatstotals.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

AWStats Totals - sort Parameter RCE (CVE-2008-3922)

Exploits CVE-2008-3922 by injecting PHP into the sort parameter of awstatstotals.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """AWStats Totals sort parameter RCE CVE-2008-3922.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

AWStats Totals awstatstotals.php sort Parameter Code Execution (CVE-2008-3922)

A code execution vulnerability has been reported in AWStats Totals. The vulnerability is due to insufficient sanitization of the "sort" parameter in the "awstatstotals.php". A remote attacker could exploit this vulnerability by dynamically creating an anonymous PHP function...

Awstatstotals 1.14 Awstatstotals.php 代码执行漏洞

No description provided by source...

CVE-2008-3922: Improper Control of Generation of Code

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function...

AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution

The remote web server is running a version of awstatstotals.php which does not properly sanitize its 'sort' argument. An attacker can run arbitrary commands on the remote host within the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...