CVE-2010-4367

awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted…

published December 2, 2010

CVSS
—
EPSS
27%
Percentile
98.1
In the wild
Unconfirmed
What it is

awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.27201 · 98.1th percentile
Published
2010-12-02T16:00Z
EPSS history
Timeline
  • 02 DEC 16:00Z
    awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted…
    cvelistv5