CVE-2014-5088
status2k - Cross-Site Scripting via Username Parameter in login.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-5088.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in Status2k software, including XSS, SQLi, command injection, RCE via eval() backdoor, template manipulation, design flaws, and information leaks. It provides specific code snippets, attack vectors, and proof-of-concept examples for each CVE.
Description
Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php.
Exploits (1)
This is a detailed technical writeup describing multiple vulnerabilities in Status2k software, including XSS, SQLi, command injection, RCE via eval() backdoor, template manipulation, design flaws, and information leaks. It provides specific code snippets, attack vectors, and proof-of-concept examples for each CVE.