awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-12-02T16:00:00Z

Updated: 2024-09-16T19:39:59.178Z

Reserved: 2010-12-02T00:00:00Z

Link: CVE-2010-4368

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-12-02T16:22:21.880

Modified: 2024-11-21T01:20:47.773

Link: CVE-2010-4368

cve-icon Redhat

No data.