CVE-2005-0362

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-02-09 · updated 2026-06-16

Description

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.

Affected products

Awstats: 4.0, 5.0, 5.1, 5.2, 5.3, 5.4 (+8)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488
http://www.osvdb.org/16089
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488
http://www.osvdb.org/16089

Get alerted when CVE-2005-0362 or the next vulnerability affects your stack