CVEs-PoC/2005/CVE-2005-0116.md

CVE-2005-0116

Description

AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.

POC

Reference

• http://awstats.sourceforge.net/docs/awstats_changelog.txt
• http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/capturePointer/libxploit
• https://github.com/dcppkieffjlpodter/libxploit
• https://github.com/kostyll/libxploit