CVE-2006-2644

AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload…

published May 30, 2006

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02712 · 85.8th percentile
Published
2006-05-30T10:00Z
EPSS history
Timeline
  • 30 MAY 10:00Z
    AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload…
    cvelistv5