CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-1527

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 79.0%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2005-1527

Awstats » Awstats » Version: 1.0

cpe:2.3:a:awstats:awstats:1.0
Awstats » Awstats » Version: 4.0

cpe:2.3:a:awstats:awstats:4.0
Awstats » Awstats » Version: 4.1

cpe:2.3:a:awstats:awstats:4.1
Awstats » Awstats » Version: 5.0

cpe:2.3:a:awstats:awstats:5.0
Awstats » Awstats » Version: 5.1

cpe:2.3:a:awstats:awstats:5.1
Awstats » Awstats » Version: 5.2

cpe:2.3:a:awstats:awstats:5.2
Awstats » Awstats » Version: 5.3

cpe:2.3:a:awstats:awstats:5.3
Awstats » Awstats » Version: 5.4

cpe:2.3:a:awstats:awstats:5.4
Awstats » Awstats » Version: 5.5

cpe:2.3:a:awstats:awstats:5.5
Awstats » Awstats » Version: 5.6

cpe:2.3:a:awstats:awstats:5.6
Awstats » Awstats » Version: 5.7

cpe:2.3:a:awstats:awstats:5.7
Awstats » Awstats » Version: 5.8

cpe:2.3:a:awstats:awstats:5.8
Awstats » Awstats » Version: 5.9

cpe:2.3:a:awstats:awstats:5.9
Awstats » Awstats » Version: 6.0

cpe:2.3:a:awstats:awstats:6.0
Awstats » Awstats » Version: 6.1

cpe:2.3:a:awstats:awstats:6.1
Awstats » Awstats » Version: 6.2

cpe:2.3:a:awstats:awstats:6.2
Awstats » Awstats » Version: 6.3

cpe:2.3:a:awstats:awstats:6.3
Awstats » Awstats » Version: 6.4

cpe:2.3:a:awstats:awstats:6.4
Canonical » Ubuntu Linux » Version: 5.04

cpe:2.3:o:canonical:ubuntu_linux:5.04
Debian » Debian Linux » Version: 3.0

cpe:2.3:o:debian:debian_linux:3.0
Debian » Debian Linux » Version: 3.1

cpe:2.3:o:debian:debian_linux:3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-1527

Products

Pricing

Contact Us