status2k vulnerabilities

Products

• status2k 7

Latest status2k CVEs

Newest publication first

1. CVE-2014-5091 A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code.

   Published 2020-02-07

   Critical·CVSS 9.8 EPSS 15.2%

   A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code.

2. CVE-2014-5093 Status2k does not remove the install directory allowing credential reset.

   Published 2020-01-10

   Critical·CVSS 9.8 EPSS 3.8%

   Status2k does not remove the install directory allowing credential reset.

3. CVE-2014-5092 Status2k allows Remote Command Execution in admin/options/editpl.php.

   Published 2020-01-10

   High·CVSS 8.8 EPSS 7.1%

   Status2k allows Remote Command Execution in admin/options/editpl.php.

4. CVE-2014-5094 Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function.

   Published 2014-10-20

   Medium·CVSS 5.0 EPSS 5.5%

   Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function.

5. CVE-2014-5088 Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php.

   Published 2014-08-06

   Medium·CVSS 4.3 EPSS 1.5%

   Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php.

6. CVE-2014-5089 SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter.

   Published 2014-08-06

   High·CVSS 7.5 EPSS 1.2%

   SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter.

7. CVE-2014-5090 admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.

   Published 2014-08-06

   Medium·CVSS 6.5 EPSS 2.8%

   admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.