tocsin

Debian/awstats: unknown

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter.

Action: Upgrade awstats to 6.5-2 or later.

Affected

introducedfixedlast affected
06.5-2-

Fixed versions

6.5-2

Sources

published · modified · JSON