Vulnerabilities

TI-2006-00555 CVE-2006-0572 · GHSA-5p7v-4h9m-3c5w

phpstatus 1.0 does not require passwords when using cookies to identify a user, which…

LOW 36

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01679 Published 2006-02-07 No fix listed

TI-2006-00554 CVE-2006-0571 · GHSA-v6r9-g2f2-3qxq

Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0133 Published 2006-02-07 No fix listed

TI-2006-00553 CVE-2006-0570 · GHSA-xcfw-v4rm-89f7

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is…

LOW 36

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01446 Published 2006-02-07 No fix listed

Vulnerabilities

Filters

phpstatus 1.0 does not require passwords when using cookies to identify a user, which…

Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote…

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is…