CVE-2014-5090
status2k - Authenticated Command Injection via Admin Panel Log Location Field
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-5090.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in Status2k software, including XSS, SQLi, command injection, RCE via eval() backdoor, template manipulation, design flaws, and information leaks. It provides specific code snippets, affected files, and exploitation steps for each CVE.
Description
admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.
Exploits (1)
This is a detailed technical writeup describing multiple vulnerabilities in Status2k software, including XSS, SQLi, command injection, RCE via eval() backdoor, template manipulation, design flaws, and information leaks. It provides specific code snippets, affected files, and exploitation steps for each CVE.