Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xp5j-75x6-qx28

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.

awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.

EPSS

Процентиль: 80%
0.01419
Низкий

Дефекты

CWE-94

Связанные уязвимости

ubuntu
около 15 лет назад

awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.

nvd
около 15 лет назад

awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.

debian
около 15 лет назад

awstats.cgi in AWStats before 7.0 on Windows accepts a configdir param ...

EPSS

Процентиль: 80%
0.01419
Низкий

Дефекты

CWE-94