Skip to content
OpenAdvisories
Unscored DSA-682-1 1 CVE

awstats - missing input sanitising

Published Feb 15, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 awstats 4.0-0.woody.2

Vulnerabilities 1

  • Unscored —

    awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the…