CVE-2006-2644
EPSS 1.0%Published: 5/30/2006Modified: 4/28/2026
Description
AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive.
Affected packages (1)
- Debian/awstatsfrom 0, < 6.5-2