CVE-2006-2237

Medium

5.1/10

Summary

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter.

Access Complexity: HIGH
AccessVector: NETWORK
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

References

Advisory Timeline

Published May 08, 2006

CVE-2006-2237

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS