AWStats Remote Code Execution and Directory Traversal Vulnerabilities

Two vulnerabilities have been identified in AWStats, which could be exploited by remote attackers to gain knowledge of sensitive information or compromise a vulnerable web server.

1. An input validation error when specifying a configuration file directory on Windows, which could be exploited by attackers to inject and execute arbitrary code by loading a malicious configuration file from a SMB share.

2. An input validation error related to LoadPlugin, which could allow directory traversal attacks.