CVE-2006-0572: Hinton Design Phpstatus

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication.

Affected products

• Hinton Design Phpstatus: version 1.0 only

Published 2006-02-07. Last modified 2026-06-16.