awstats -- arbitrary code execution vulnerabilityentered 2005-08-14
no CVE referenced
CVE details
CVE-2005-1527
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
- Score
- 5.0 medium
- Published
- 2005-08-15
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.