Published: 15/08/2005 Updated: 14/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Eval injection vulnerability in awstats.pl in AWStats 6.4 and previous versions, when a URLPlugin is enabled, allows remote malicious users to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.

Vulnerable Product	Search on Vulmon	Subscribe to Product
awstats awstats
canonical ubuntu linux 5.04
debian debian linux 3.1
debian debian linux 3.0

Peter Vreugdenhil discovered a command injection vulnerability in AWStats As part of the statistics reporting function, AWStats displays information about the most common referrer values that caused users to visit the website Referer URLs could be crafted in a way that they contained arbitrary Perl code which would have been executed with the pri ...

CWE-94 http://www.securiteam.com/unixfocus/5DP0J00GKE.html http://www.securityfocus.com/bid/14525 http://www.osvdb.org/18696 http://securitytracker.com/id?1014636 http://secunia.com/advisories/16412 http://www.debian.org/security/2005/dsa-892 http://secunia.com/advisories/17463 http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false http://www.novell.com/linux/security/advisories/2005_19_sr.html https://exchange.xforce.ibmcloud.com/vulnerabilities/21769 https://usn.ubuntu.com/167-1/https://usn.ubuntu.com/167-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-1527

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect