CVE-2005-0116
EXPLOITEDawstats < 6.3 - Remote Code Execution via configdir Parameter
Title source: llmExploitation Summary
CVE-2005-0116 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 5 public exploits from researchers including Metasploit, THUNDER, GHC, including a Metasploit module exploits/unix/webapp/awstats_configdir_exec.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in AWStats via the 'configdir' parameter, allowing arbitrary command execution. It sends a crafted GET request with a payload encoded in the URI to trigger RCE.
Description
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.
Exploits (5)
This Metasploit module exploits a command injection vulnerability in AWStats via the 'configdir' parameter, allowing arbitrary command execution. It sends a crafted GET request with a payload encoded in the URI to trigger RCE.
This exploit targets a command injection vulnerability in AwStats 6.2 and below via the `configdir` parameter. It sends a crafted HTTP request with a command enclosed in `|` characters to achieve remote command execution.
This Perl script exploits a command injection vulnerability in Advanced Web Statistics (AWStats) versions 6.0 to 6.2 via the 'configdir' parameter. It sends a crafted HTTP GET request to execute arbitrary commands on the target server.
This Metasploit module exploits a command injection vulnerability in AWStats via the 'configdir' parameter, allowing arbitrary command execution. It encodes the payload and sends it via a crafted HTTP GET request.
This Metasploit module exploits a command injection vulnerability in AWStats via the 'configdir' parameter, allowing arbitrary command execution. It encodes the payload and uses HTTP GET requests to trigger the vulnerability.