EDB-35035

functional

AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution

view exploit source exploit_dbverifiedtype webappsauthor StenoPlasmapublished 2010-11-30catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-4367UShigh7.5Exploit
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan