Page 3 of 21 results (0.002 seconds)

CVSS: 9.8EPSS: 91%CPEs: 1EXPL: 5

18 Jan 2005 — AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl. • https://www.exploit-db.com/exploits/16905 • CWE-20: Improper Input Validation •