mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 05:11:38 +02:00
768 B
768 B
CVE-2014-5094
Description
Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function.
POC
Reference
- http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
- http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
Github
No PoCs found on GitHub currently.