CVE-2005-1527
EPSS 1.3%awstats - missing input sanitising
發布日:2005/8/15修改日:2026/4/28
也稱為:DEBIAN-CVE-2005-1527
描述
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
受影響套件(2)
- Debian/awstatsfrom 0, < 6.4-1.1
- Debian/awstatsfrom 0, < 6.4-1sarge1