CVE-2006-0570

phpstatus 1.0 is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL and bypass authentication via the check.php username parameter and via cookie-based authentication when magic_quotes_gpc is off. Official details in the connected sources descr...

CVE-2006-0571

CVE-2006-0571 affects phpstatus 1.0 with multiple XSS weaknesses that allow remote attackers to inject arbitrary web script or HTML via the administrative interface. The vulnerability is described as unknown attack vectors in the admin area; the provided documents do not specify affected patch ve...

CVE-2006-0572

CVE-2006-0572 affects phpstatus 1.0, where authentication can be bypassed because cookies are used to identify the user without verifying a password. The vulnerability is tied to the cookies-based authentication flow (vulnerable in check.php), enabling remote attackers to bypass login. Exploit in...