Status2k

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Status2k records in CISA KEV

No Status2k vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Status2k 7 records MEDIUM

Records

7 records in Status2k · all components

TI-2014-04165 CVE-2014-5091 · GHSA-wm7j-555c-crc7

A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies…

MEDIUM 58

A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15152 Published 2020-02-07 No fix listed CWE-20

TI-2014-04167 CVE-2014-5093 · GHSA-wg33-h2jq-fj8f

Status2k does not remove the install directory allowing credential reset.

MEDIUM 49

Status2k does not remove the install directory allowing credential reset.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03798 Published 2020-01-10 No fix listed CWE-522

TI-2014-04166 CVE-2014-5092 · GHSA-jr4g-c345-j8c2

Status2k allows Remote Command Execution in admin/options/editpl.php.

MEDIUM 48

Status2k allows Remote Command Execution in admin/options/editpl.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07109 Published 2020-01-10 No fix listed CWE-20

TI-2014-04163 CVE-2014-5089 · GHSA-4xhm-gw35-w42h

SQL injection vulnerability in admin/options/logs.php in Status2k allows remote…

LOW 35

SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01226 Published 2014-08-06 No fix listed CWE-89

TI-2014-04164 CVE-2014-5090 · GHSA-vcg3-f395-4q6q

admin/options/logs.php in Status2k allows remote authenticated administrators to execute…

LOW 34

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.028 Published 2014-08-06 No fix listed CWE-94

TI-2014-04168 CVE-2014-5094 · GHSA-7vpq-c2mw-x963

Status2k allows remote attackers to obtain configuration information via a phpinfo action…

LOW 31

Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05544 Published 2014-10-20 No fix listed CWE-200

TI-2014-04162 CVE-2014-5088 · GHSA-wr5r-ch4g-8w5c

Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject…

LOW 23

Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01503 Published 2014-08-06 No fix listed CWE-79

Open these records in search →

Critical	2
High	2
Medium	3
Low	0
No CVSS	0