Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-5089.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in Status2k software, including XSS, SQLi, command injection, RCE via eval() backdoor, template manipulation, design flaws, and information leaks. It provides specific code snippets, attack vectors, and proof-of-concept examples for each CVE.
Description
SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter.
Exploits (1)
This is a detailed technical writeup describing multiple vulnerabilities in Status2k software, including XSS, SQLi, command injection, RCE via eval() backdoor, template manipulation, design flaws, and information leaks. It provides specific code snippets, attack vectors, and proof-of-concept examples for each CVE.