CVE-2005-1527

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.

• CWE-94

• http://secunia.com/advisories/16412Broken Link, Patch, Vendor Advisory
• http://secunia.com/advisories/17463Broken Link
• http://securitytracker.com/id?1014636Broken Link, Patch, Third Party Advisory, VDB Entry
• http://www.debian.org/security/2005/dsa-892Mailing List, Third Party Advisory
• http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=falseBroken Link
• http://www.novell.com/linux/security/advisories/2005_19_sr.htmlBroken Link
• http://www.osvdb.org/18696Broken Link, Patch
• http://www.securiteam.com/unixfocus/5DP0J00GKE.htmlBroken Link, Vendor Advisory
• http://www.securityfocus.com/bid/14525Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21769Third Party Advisory, VDB Entry
• https://usn.ubuntu.com/167-1/Broken Link
• http://secunia.com/advisories/16412Broken Link, Patch, Vendor Advisory
• http://secunia.com/advisories/17463Broken Link
• http://securitytracker.com/id?1014636Broken Link, Patch, Third Party Advisory, VDB Entry
• http://www.debian.org/security/2005/dsa-892Mailing List, Third Party Advisory
• http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=falseBroken Link
• http://www.novell.com/linux/security/advisories/2005_19_sr.htmlBroken Link
• http://www.osvdb.org/18696Broken Link, Patch
• http://www.securiteam.com/unixfocus/5DP0J00GKE.htmlBroken Link, Vendor Advisory
• http://www.securityfocus.com/bid/14525Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21769Third Party Advisory, VDB Entry
• https://usn.ubuntu.com/167-1/Broken Link

Published

Aug 15, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1521Integer overflow in the fetch_io function of the imap4d serv…
• CVE-2005-1522The imap4d server for GNU Mailutils 0.5 and 0.6, and other v…
• CVE-2005-1523Format string vulnerability in imap4d server in GNU Mailutil…
• CVE-2005-1524PHP file inclusion vulnerability in top_graph_header.php in …
• CVE-2005-1525SQL injection vulnerability in config_settings.php for Cacti…
• CVE-2005-1526PHP remote file inclusion vulnerability in config_settings.p…
• CVE-2005-1528Untrusted search path vulnerability in the crttrap command i…
• CVE-2005-1530Sophos Anti-Virus 5.0.1, with "Scan inside archive files" en…
• CVE-2005-1531Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not…
• CVE-2005-1532Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not p…
• CVE-2005-1543Multiple stack-based and heap-based buffer overflows in Remo…
• CVE-2005-1544Stack-based buffer overflow in libTIFF before 3.7.2 allows r…