A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code.
A vulnerability exits in Status2K
Exploit
CVE-2014-5091
NVD
Refer to CVE-2014-5091 NVD advisory