Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Telartis_bv Awstats_totals 'awstatstotals.php'代码注入漏洞
Vulnerability Description
AWStats Totals是一个在awstats上的小的辅助工具，一个简单的PHP脚本，他通过分析awstats的数据库文件，把所有统计网站按照月份整理出来，提供浏览排列和月份查询。 AWStats Totals 1.0到1.14版本中的awstatstotals.php允许远程攻击者借助种类参数中的一个PHP序列，执行任意代码。当动态地创建一个匿名的PHP函数时，多种类函数会使用到该种类参数。
CVSS Information
N/A
Vulnerability Type
N/A