phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication.
- http://evuln.com/vulns/61/summary.html
- http://securityreason.com/securityalert/427
No PoCs found on GitHub currently.