CVE-2014-5092: Status2k allows Remote Command Execution in admin/options/editpl.php.

Security readout for executives and security teams

CVE-2014-5092 describes remote command execution in Status2k through admin/options/editpl.php. In business terms, a reachable vulnerable admin function could let an attacker run server-side commands. The public bundle does not identify affected versions, authentication requirements, a vendor patch, or active exploitation. Potentially exposed organizations are those still running Status2k, especially where the admin interface or admin/options/editpl.php is reachable from untrusted networks. The bundle provides no version range, CPE, hosting pattern, or authentication details. Prioritize discovery and containment if Status2k exists in the environment. Remote command execution can be severe, but urgency is constrained by incomplete public evidence on versions, prerequisites, fixes, and exploitation. Mitigation focus: Identify any Status2k deployments and owners.; Check vendor or project guidance for affected versions and fixes.; Restrict access to Status2k administrative paths..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.