| Package | Affected versions | Patched versions |
|---|---|---|
| awstats | = 1.0= 2.1.= 2.2.3= 2.2.4= 3.0= 3.1= 3.2= 4.0= 4.1= 5.0= 5.1= 5.2= 5.3= 5.4= 5.5= 5.6= 5.7= 5.8= 5.9= 6.0= 6.1= 6.2= 6.3= 6.4= 6.4_1= 6.5= 6.5_1= 6.5_1.857= 6.6= 6.7= 6.8= 6.9≤ 6.95 |
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free