Family: CGI abuses --> Category: infos
AWStats rawlog plugin logfile parameter input validation vulnerability Vulnerability Scan
Vulnerability Scan Summary
Acertains the presence of AWStats awstats.pl
Detailed Explanation for this Vulnerability Test
The remote host seems to be running AWStats, a free real-time logfile analyzer.
AWStats Rawlog Plugin is reported prone to an input validation vulnerability.
The issue is reported to exist because user supplied 'logfile' URI data passed
to the 'awstats.pl' script is not sanitized.
A possible hacker may exploit this condition to execute commands remotely or disclose
contents of web server readable files.
Solution : Upgrade to the latest version of this software
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.