← Database

CVE-2005-1527

MEDIUM CVSS: 5.0 Published: 2005-08-15 Modified: 2026-06-16

Description

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.

Affected Platforms

Awstats AwstatsCanonical Ubuntu LinuxDebian Debian Linux

Weakness Type

CWE-94

References