Vulnerability in Awstats

CVE-2005-0437

Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.

EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.

Affected products

  • Awstats — versions 6.3, 6.4
  • N/a — versions n/a

References

  • cve@mitre.org (Exploit, Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)