CVE-2006-2237
The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in…
published May 8, 2006
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.
What it is
The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.58356 · 99.1th percentile
- Published
- 2006-05-08T23:00Z
EPSS history
Timeline