medium6.5Public exploit code
CVE-2014-5090
admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in A…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Status2k Server Monitoring Software - Multiple Vulnerabilities2014-08-02 · webapps · php
Impact
admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Status2k | Status2k | All versions |