CVE-2005-4013: PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which a...

Security readout for executives and security teams

PHP Web Statistik 1.4 could expose internal statistics configuration because a sensitive config file was stored under the public web root. The main business risk is information disclosure that may reveal log locations and related data, not direct system takeover based on the provided sources. Exposure is likely limited to internet-facing sites still running PHP Web Statistik 1.4 with stat.cfg or related log data reachable from the web root. Prioritize remediation if the software is internet-facing or used on a site containing sensitive traffic data. The issue is old, but exposed configuration and log data can support follow-on reconnaissance. Mitigation focus: Identify any PHP Web Statistik 1.4 deployments.; Check vendor changelog and advisories for upgrade or configuration guidance.; Ensure stat.cfg is not publicly reachable from the web root..

Prepared

Jun 29, 2026, 16:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.