AWStats flaw

My sites just got "defaced"

[twinsrul]

Hey guys using AWStats, hackers got into my site and "defaced" the index page through a flaw in AWStats. Thank goodness just they just changed the index page. Make sure you guys are running AWStats 6.3-r2. I learned the hard way.

More info here: [gentoo.org...]

[bcolflesh]

The bigger lesson is not to place the AWStats files in a publically read/write - able area.

[amznVibe]

A warning has been posted in at least two threads on WebmasterWorld.
[webmasterworld.com...]
[webmasterworld.com...] <- a month old

[twinsrul]

bcolflesh, I use a third party hosting company for my websites, I had no control over where awstats was set up.

amznVibe, I notice that you posted in Webmaster General. IMO, your post would of been better if you would of posted your AWStats flaw thread in Tracking and Logging.