Telartis's AWStats Totals versions 1.0 through 1.14 suffer from a remote code execution vulnerability.