header-logo
Suggest Exploit
vendor:
AWStats
by:
SecurityFocus
6.4
CVSS
MEDIUM
Information Disclosure
200
CWE
Product Name: AWStats
Affected Version From: 6.4
Affected Version To: 6.4
Patch Exists: YES
Related CWE: N/A
CPE: awstats
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005

Remote Information Disclosure Vulnerability in AWStats

A remote information disclosure vulnerability reportedly affects AWStats. This issue is due to a failure of the application to properly validate access to sensitive data. An attacker may leverage this issue to gain access to potentially sensitive data, possibly facilitating further attacks against an affected computer.

Mitigation:

Ensure that access to sensitive data is properly validated.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/12545/info

A remote information disclosure vulnerability reportedly affects AWStats. This issue is due to a failure of the application to properly validate access to sensitive data.

An attacker may leverage this issue to gain access to potentially sensitive data, possibly facilitating further attacks against an affected computer. 

http://www.example.com/cgi-bin/awstats-6.4/awstats.pl?debug=1
http://www.example.com/cgi-bin/awstats-6.4/awstats.pl?debug=2