Full Path Disclosure at AWStats 7.6 or minor versions
Full Path Disclosure vulnerability in AWStats before 7.0 or minor versions allows remote attackers to know where config file is allocated, obtaining full path of server.
PAYLOAD: awstats.pl?framename=mainright&update=123123123123
RESULT:
Found by: JuanRi Villén, Ruben Gutierrez and Yeray Fernández