Phpstatus Security Vulnerabilities

CVE-2006-0572

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass...

CVE-2006-0570

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative...

CVE-2006-0571

Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative...