CVE-2005-0438

awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter.

• http://secunia.com/advisories/14299Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/390368Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19477
• http://secunia.com/advisories/14299Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/390368Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19477

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0432BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 …
• CVE-2005-0433Php-Nuke 7.5 allows remote attackers to determine the full p…
• CVE-2005-0434Multiple cross-site scripting (XSS) vulnerabilities in Php-N…
• CVE-2005-0435awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to…
• CVE-2005-0436Direct code injection vulnerability in awstats.pl in AWStats…
• CVE-2005-0437Directory traversal vulnerability in awstats.pl in AWStats 6…
• CVE-2005-0439Buffer overflow in the decode_post function in ELOG before 2…
• CVE-2005-0440ELOG before 2.5.7 allows remote attackers to bypass authenti…
• CVE-2005-0441Multiple stack-based buffer overflows in Sybase Adaptive Ser…
• CVE-2005-0442Directory traversal vulnerability in index.php for CubeCart …
• CVE-2005-0443index.php in CubeCart 2.0.4 allows remote attackers to (1) o…
• CVE-2005-0444VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared l…