EDB-773

functional

AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution

view exploit source exploit_dbverifiedtype webappsauthor GHCpublished 2005-01-25catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2005-0116US	high7.5	74.9% (100th)	Exploit	2005-01-18
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.