EDB-32870

functional

AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures

view exploit source exploit_dbverifiedtype webappsauthor r0tpublished 2009-04-19catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2006-3682US	medium5.0	9.46% (95th)	Exploit	2006-07-21
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.