What is CVE-2009-5020?

CVE-2009-5020 is a vulnerability in Awstats, classified under Improper Input Validation. Published 2010-12-02.

Is CVE-2009-5020 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Awstats

CVE-2009-5020

Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.

Affected products

Awstats — versions 5.6, 2.1., 6.2
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

20142995/nuclei-templates
ARPSyndicate/kenzer-templates

References

cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2009-5020?: CVE-2009-5020 is a vulnerability in Awstats, classified under Improper Input Validation. Published 2010-12-02.
Is CVE-2009-5020 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.