EUVD-2006-0579

Malware in sbrugna...

Authentication flaw

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication...

CVE-2006-0570

phpstatus 1.0 is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL and bypass authentication via the check.php username parameter and via cookie-based authentication when magic_quotes_gpc is off. Official details in the connected sources descr...

CVE-2006-0572

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication...