CVE-2014-5090

CVE-2014-5090 describes a command injection vulnerability in admin/options/logs.php of Status2k, allowing remote authenticated administrators to execute arbitrary commands by injecting shell metacharacters into the "Location" field when adding logs. With a CVSS score of 6.5, this vulnerability has a network attack vector, low attack complexity, and can lead to partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB (EDB-34239), though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.