
CVE-2005-0438 – AWStats 5.7 < 6.2 - Multiple Remote s
https://notcve.org/view.php?id=CVE-2005-0438
15 Feb 2005 — awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter. • https://www.exploit-db.com/exploits/853 •

CVE-2005-0362
https://notcve.org/view.php?id=CVE-2005-0362
09 Feb 2005 — awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488 •

CVE-2005-0116 – AWStats 6.1 < 6.2 - 'configdir' Remote Command Execution
https://notcve.org/view.php?id=CVE-2005-0116
18 Jan 2005 — AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl. • https://www.exploit-db.com/exploits/16905 • CWE-20: Improper Input Validation •