Vulnerabilities (CVE)

Filtered by vendor Awstats Subscribe
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0435 1 Awstats 1 Awstats 2024-11-20 5.0 MEDIUM N/A
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog.
CVE-2005-0363 1 Awstats 1 Awstats 2024-11-20 7.5 HIGH N/A
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.
CVE-2005-0362 1 Awstats 1 Awstats 2024-11-20 4.6 MEDIUM N/A
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.
CVE-2005-0116 1 Awstats 1 Awstats 2024-11-20 7.5 HIGH N/A
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.