Vulnerability Details CVE-2014-5093
Status2k does not remove the install directory allowing credential reset.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.038
EPSS Ranking 88.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95113
- http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95113