• info
• discussion
• exploit
• solution
• references

AWStats Referrer Arbitrary Command Execution Vulnerability

No exploit is required.

A proof of concept is available:
http://www.securityfocus.com/data/vulnerabilities/exploits/awstats_poc.pl

• /data/vulnerabilities/exploits/awstats_poc.pl