AWStats Totals awstatstotals.php sort Parameter Code Execution (CVE-2008-3922)

A code execution vulnerability has been reported in AWStats Totals. The vulnerability is due to insufficient sanitization of the "sort" parameter in the "awstatstotals.php". A remote attacker could exploit this vulnerability by dynamically creating an anonymous PHP function...

Awstatstotals 1.14 Awstatstotals.php 代码执行漏洞

No description provided by source...

CVE-2008-3922: Improper Control of Generation of Code

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function...

AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution

The remote web server is running a version of awstatstotals.php which does not properly sanitize its 'sort' argument. An attacker can run arbitrary commands on the remote host within the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...