CVE-2005-0436

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14299Patch, Vendor Advisory
http://www.osvdb.org/13832
http://www.securityfocus.com/archive/1/390368Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19336
http://secunia.com/advisories/14299Patch, Vendor Advisory
http://www.osvdb.org/13832
http://www.securityfocus.com/archive/1/390368Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19336

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-04377.5Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot CVE-2005-04385.0awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter.CVE-2005-04397.5Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long CVE-2005-04407.5ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write passwor CVE-2005-044110.0Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users t CVE-2005-04425.0Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter CVE-2005-04434.3index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS)CVE-2005-04444.6VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary direct CVE-2005-04454.3Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain n CVE-2005-04465.0Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qua CVE-2005-04475.0Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.CVE-2005-04481.2Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tr