vendor:
AWStats
by:
Silentium of Anacron Group Italy
7.5
CVSS
HIGH
Remote Code Execution
CWE
Product Name: AWStats
Affected Version From: v5.7
Affected Version To: v6.2
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2005
AWStats Remote Code Execution
This exploit utilizes three methods to exploit the vulnerability found in AWStats software. An attacker can execute remote code on a vulnerable machine with httpd privileges.
Mitigation:
Update AWStats software to a version beyond v6.2 to address the vulnerability.