CVE-2006-0570

CVE-2006-0570 is a high-severity vulnerability in Hinton Design Phpstatus with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Description

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative interface.

Frequently asked questions

What is CVE-2006-0570?
Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative interface.
How severe is CVE-2006-0570?
CVE-2006-0570 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2006-0570 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-0570?
CVE-2006-0570 affects Hinton Design Phpstatus. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2006-0570?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2006-0570 published?
CVE-2006-0570 was published on 2006-02-07 and last updated on 2026-06-16.

References

Affected products (1)

More vulnerabilities in Hinton Design Phpstatus

All CVEs affecting Hinton Design Phpstatus →