Vulnerabilities > Status2K

DATE CVE VULNERABILITY TITLE RISK
2020-02-07 CVE-2014-5091 Improper Input Validation vulnerability in Status2K
A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code.
network
low complexity
status2k CWE-20
critical
9.8
2020-01-10 CVE-2014-5093 Insufficiently Protected Credentials vulnerability in Status2K
Status2k does not remove the install directory allowing credential reset.
network
low complexity
status2k CWE-522
critical
9.8
2020-01-10 CVE-2014-5092 Improper Input Validation vulnerability in Status2K
Status2k allows Remote Command Execution in admin/options/editpl.php.
network
low complexity
status2k CWE-20
8.8