There is an Awstats exploit that is putting a hurting on some smart folks like Jeremy Zawodny and Russell Beattie.

Here is the exploit:
http://www.k-otik.com/exploits/20050124.awexpl.c.php

My question is:
Is it necessary to manually upgrade Awstats given that its behind Cpanel password protection? Can I just wait for the next Cpanel release?

well.. in case of cpanel, it is protected with htaccess. So they need a user/pass to access to that file.


I personaly recomend to wait for cpanel, they should rls the new version in a few days, if it is not avail already.

carlos