CVE-2006-2237

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter.

Date published : 2006-05-08

http://www.securityfocus.com/bid/17844

http://awstats.sourceforge.net/awstats_security_news.php