Vulnerability in AWStats (Details via private mail)

[untested711]

Hi @eldy,

Sent you a mail (to eldy@destailleur.fr) on Aug 4, 2025 regarding a vulnerability in AWStats.

Please confirm you have received it via mail.

Thanks

[eldy]

I have received email with reminder but no description on vulnerability, but i may have missed it.

[untested711]

Resent the initial mail.

Please check the Spam folder or if the mail was blocked.

The first and third mail may not have reached because we are trying to send the PoC as an attachment.

Please let us know asap if you received it or, if not, in order for us to resend the whole PoC as plaintext.

Thanks

[dualfade]

please watch for other emails in spam as well.

Thank you.

[ShaiMagal]

@untested711 Can you send me more details please?

[dualfade]

I also sent over a vuln last week around same time. So please watch for that in spam. It may be something else entirely. If so; I would like to open a valid request for it. As there are very minimal details here.

POC was included.

Thanks.