Approved changes feed: RSS · Atom

cpe:2.3:a:status2k:status2k:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorStatus2K (7f4462ae-d335-58f8-bfba-a716d4f68449)
ProductStatus2K (19e1e3f0-e50c-5647-8c81-117a42c046e4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5094 vulnerable 2026-06-08 05:05:46.826722 Details available
Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function.
Published: 2014-10-20T15:00:00.000Z
Updated: 2024-08-06T11:34:37.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5090 vulnerable 2026-06-08 05:05:46.823477 Details available
admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.
Published: 2014-08-06T18:00:00.000Z
Updated: 2024-08-06T11:34:37.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5089 vulnerable 2026-06-08 05:05:46.823188 Details available
SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter.
Published: 2014-08-06T18:00:00.000Z
Updated: 2024-08-06T11:34:37.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5088 vulnerable 2026-06-08 05:05:46.822702 Details available
Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php.
Published: 2014-08-06T18:00:00.000Z
Updated: 2024-08-06T11:34:37.329Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.