CVE-2005-1527

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-15 · updated 2026-06-16
Weakness: CWE-94

Description

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.

Affected products

Awstats: through 6.4
Canonical Ubuntu Linux: 5.04
Debian Linux: 3.0, 3.1

References

http://secunia.com/advisories/16412
http://secunia.com/advisories/17463
http://securitytracker.com/id?1014636
http://www.debian.org/security/2005/dsa-892
http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false
http://www.novell.com/linux/security/advisories/2005_19_sr.html
http://www.osvdb.org/18696
http://www.securiteam.com/unixfocus/5DP0J00GKE.html
http://www.securityfocus.com/bid/14525
https://exchange.xforce.ibmcloud.com/vulnerabilities/21769
https://usn.ubuntu.com/167-1/
http://secunia.com/advisories/16412

Get alerted when CVE-2005-1527 or the next vulnerability affects your stack