CVE-2014-5091

Status2K 2.5 Server Monitoring Software is affected by CVE-2014-5091 via the multies parameter to includes/functions.php, which could allow an attacker to execute arbitrary PHP code. Affected component: the server monitoring software’s PHP code path, specifically includes/functions.php, with the ...

CVE-2014-5093

Status2k Server Monitoring Software (CVE-2014-5093) is documented to not remove the install directory, enabling credential reset. Connected sources corroborate multiple vulnerabilities across CVEs CVE-2014-5088…CVE-2014-5094 (XSS, SQL Injection, command execution) affecting Status2k, with exploit...

CVE-2014-5094

CVE-2014-5094 affects Status2k Server Monitoring Software. The vulnerability stems from a phpinfo call in status/index.php, which is reachable remotely and leads to disclosure of configuration information. Multiple connected sources (NVD/NVD-derived entries, OpenVAS/ExploitDB references, and thir...

CVE-2014-5092

CVE-2014-5092 affects the Status2k Server Monitoring Software . The initial description states that “Status2k allows Remote Command Execution in admin/options/editpl.php,” indicating a vulnerability in the web interface that enables an attacker to execute commands remotely via the affected PHP fi...

CVE-2014-5088

CVE-2014-5088 is a cross-site scripting (XSS) vulnerability in Status2k Server Monitoring Software. The risk entry describes an attacker injecting arbitrary script/HTML through the username parameter sent to login.php, enabling remote exploitation. Public records in the NVD entry enumerate the fl...

CVE-2014-5089

Status2k Server Monitoring Software (Status2K) is affected by CVE-2014-5089 due to an SQL injection in admin/options/logs.php where the log parameter can be exploited by remote authenticated administrators to execute arbitrary SQL commands. This is supported by multiple sources (NVD entry CVE-201...

CVE-2014-5090

CVE-2014-5090 affects Status2k Server Monitoring Software. admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field of Add Logs in the Admin Panel. CVSSv2 base score is 6.5 (MEDIUM) with vector AV:N/...