Lucene search
Veracode Vulnerability DatabaseVERACODE:28582HistoryDec 13, 2020 - 4:24 a.m.
Remote Code Execution
2020-12-1304:24:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
awstats
vulnerability
remote code execution
cgi-bin
configuration file
EPSS
0.002
Percentile
61.2%
awstats is vulnerable to remote code execution. The vulnerability exists as cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format.
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0024)
2022-01-28 00:00:00
Fedora: Security Advisory for awstats (FEDORA-2020-d1aa0e030c)
2021-01-11 00:00:00
AWStats < 7.8 File Read Vulnerability
2020-12-18 00:00:00
mageia
mageia
Updated awstats package fixes a security vulnerability
2021-01-14 18:13:25
nvd
nvd
CVE-2020-29600
2020-12-07 20:15:12
CVE-2020-35176
2020-12-12 00:15:12
debian
debian
[SECURITY] [DLA 2506-1] awstats security update
2020-12-23 15:18:26
cvelist
cvelist
CVE-2020-29600
2020-12-07 19:52:14
CVE-2020-35176
2020-12-11 23:16:22
osv
osv
CVE-2020-29600
2020-12-07 20:15:12
awstats - security update
2020-12-23 00:00:00
awstats vulnerabilities
2021-05-13 17:12:49
cve
cve
CVE-2020-29600
2020-12-07 20:15:12
CVE-2020-35176
2020-12-12 00:15:12
nessus
nessus
Fedora 32 : awstats (2020-d1aa0e030c)
2021-01-11 00:00:00
Debian DLA-2506-1 : awstats security update
2020-12-24 00:00:00
prion
prion
Format string
2020-12-07 20:15:00
Format string
2020-12-12 00:15:00
fedora
fedora
[SECURITY] Fedora 32 Update: awstats-7.8-2.fc32
2021-01-08 02:52:03
redhatcve
redhatcve
CVE-2020-29600
2022-05-20 23:23:57
CVE-2020-35176
2022-05-20 23:27:46
debiancve
debiancve
CVE-2020-29600
2020-12-07 20:15:12
CVE-2020-35176
2020-12-12 00:15:12
alpinelinux
alpinelinux
CVE-2020-29600
2020-12-07 20:15:12
CVE-2020-35176
2020-12-12 00:15:12
ubuntu
ubuntu
AWStats vulnerabilities
2021-05-13 00:00:00
veracode
veracode
Arbitrary File Read
2020-12-23 21:54:26
archlinux
archlinux
[ASA-202103-15] awstats: directory traversal
2021-03-25 00:00:00
freebsd
freebsd
www/awstats -- Partial absolute pathname
2022-12-11 00:00:00
ubuntucve
ubuntucve
CVE-2020-35176
2020-12-12 00:00:00
CVE-2020-29600
2020-12-07 00:00:00