hinton design phpstatus vulnerabilities

Latest hinton design phpstatus CVEs

Newest publication first

1. CVE-2006-0572 phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication.

   Published 2006-02-07

   High·CVSS 7.5 EPSS 1.7%

   phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication.

2. CVE-2006-0571 Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.

   Published 2006-02-07

   Medium·CVSS 4.3 EPSS 1.3%

   Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.

3. CVE-2006-0570 Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username para...

   Published 2006-02-07

   High·CVSS 7.5 EPSS 1.4%

   Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative interfac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.