CVSS: 5.0EPSS: 1%CPEs: 4EXPL: 0CVE-2005-1527
https://notcve.org/view.php?id=CVE-2005-1527
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call. • http://secunia.com/advisories/16412 http://secunia.com/advisories/17463 http://securitytracker.com/id?1014636 http://www.debian.org/security/2005/dsa-892 http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false http://www.novell.com/linux/security/advisories/2005_19_sr.html http://www.osvdb.org/18696 http://www.securiteam.com/unixfocus/5DP0J00GKE.html http://www.securityfocus.com/bid/14525 https://exchange.xforce.ibmcloud.com/vulnerabilities/21769 h • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 2CVE-2005-0435 – AWStats 6.4 - Denial of Service
https://notcve.org/view.php?id=CVE-2005-0435
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog. • https://www.exploit-db.com/exploits/817 http://secunia.com/advisories/14299 http://www.securityfocus.com/archive/1/390368 https://exchange.xforce.ibmcloud.com/vulnerabilities/19333 •
CVSS: 5.0EPSS: 12%CPEs: 2EXPL: 1CVE-2005-0438 – AWStats 5.7 < 6.2 - Multiple Remote s
https://notcve.org/view.php?id=CVE-2005-0438
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter. • https://www.exploit-db.com/exploits/853 http://secunia.com/advisories/14299 http://www.securityfocus.com/archive/1/390368 https://exchange.xforce.ibmcloud.com/vulnerabilities/19477 •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 2CVE-2005-0437
https://notcve.org/view.php?id=CVE-2005-0437
Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter. • http://secunia.com/advisories/14299 http://www.securityfocus.com/archive/1/390368 •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 2CVE-2005-0436 – AWStats 6.4 - Denial of Service
https://notcve.org/view.php?id=CVE-2005-0436
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter. • https://www.exploit-db.com/exploits/817 http://secunia.com/advisories/14299 http://www.osvdb.org/13832 http://www.securityfocus.com/archive/1/390368 https://exchange.xforce.ibmcloud.com/vulnerabilities/19336 •