CVE-2005-0436
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers...
CVE-2005-0436 is a high vulnerability (CVSS 7.5) in Awstats, published February 15, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.02%, the 94th percentile. Fixed in awstats 6.3-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 7.02%EPSS, 94th percentile
- Exploitation
- None known1 public exploit
- Fixed in
6.3-1awstats +2 more
Description
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
Exploit likelihood
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | AWStats 6.4 - Denial of Service | 2005-02-14 |
What each source reports
NVD Score used
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
- Record
CVE-2005-0436- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
- Record
CVE-2005-0436- Updated
- 2026-11-02
EUVDEUVD-2005-0437No score
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
- Record
EUVD-2005-0437- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-95gq-qwv9-98cmNo score
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers...
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
- Record
GHSA-95gq-qwv9-98cm- Updated
- 2026-11-02
OSVNo score
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
- Record
CVE-2005-0436- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0436No score
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
- Record
DEBIAN-CVE-2005-0436- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.