CVE-2005-0435

awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• Awstats (Awstats)

References

• http://secunia.com/advisories/14299
• http://www.securityfocus.com/archive/1/390368
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19333