CVE-2005-0437

Опубликовано: 02 мая 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.

Ссылки

http://secunia.com/advisories/14299
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/390368
Exploit
Vendor Advisory
http://secunia.com/advisories/14299
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/390368
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*

cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00597

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0437

ubuntu

больше 20 лет назад

Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.

CVE-2005-0437

debian

больше 20 лет назад

Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 ...

GHSA-v4pj-pfq5-2mmv

github

больше 3 лет назад

Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.

EPSS

Процентиль: 69%

0.00597

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other