Arbitrary Perl Module Inclusion via Directory Traversal in AWStats

CVE-2005-0437

Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.

Learn more about our Aws Audit.