RCE in Status2k

CVE-2014-5090

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.