Security Advisory

CVE-2010-4367

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-12-02 16:00:00

Last updated 2024-08-07 03:43:14

Assigner mitre

State PUBLISHED

Description

awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.

← Browse all CVEs View on cve.org ↗