Vulnerability in Awstats

CVE-2005-0435

awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog.

EPSS: 0.074 (93.8th percentile) — read the EPSS interpretation.

Affected products

  • Awstats — versions 6.3, 6.4
  • N/a — versions n/a

References

  • cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)