EDB-817

functional

AWStats 6.4 - Denial of Service

view exploit source exploit_dbverifiedtype dosauthor GHCpublished 2005-02-14catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2005-0435US	medium5.0	7.36% (94th)	Exploit	2005-05-02
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog.
CVE-2005-0436US	high7.5	7.02% (94th)	Exploit	2005-05-02
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.