Description
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.
Unscored
CVE-2010-4368
EUVD-2010-4337GHSA-xp5j-75x6-qx28
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary c…
Published Dec 2, 2010 · Updated Sep 16, 2024 · Assigned by mitre