CVE-2005-0116

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 74.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-01-18 · updated 2026-06-16
Weakness: CWE-20

Description

AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.

Affected products

Awstats: through 6.3

References

http://awstats.sourceforge.net/docs/awstats_changelog.txt
http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf
http://secunia.com/advisories/13893/
http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=false
http://www.kb.cert.org/vuls/id/272296
http://www.osvdb.org/13002
http://www.securityfocus.com/bid/12298
http://awstats.sourceforge.net/docs/awstats_changelog.txt
http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf
http://secunia.com/advisories/13893/
http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=false
http://www.kb.cert.org/vuls/id/272296

Get alerted when CVE-2005-0116 or the next vulnerability affects your stack