xampp Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/xampp/ Sun, 26 Feb 2023 09:11:33 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png xampp Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/xampp/ 32 32 CVE-2008-6498 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6498/ Sun, 26 Feb 2023 09:11:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6498/ Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter.

The post CVE-2008-6498 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter.

The post CVE-2008-6498 appeared first on CVE Vulnerability.

]]> CVE-2008-6499 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6499/ Sun, 26 Feb 2023 09:11:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6499/ security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1.

The post CVE-2008-6499 appeared first on CVE Vulnerability.

]]> security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1.

The post CVE-2008-6499 appeared first on CVE Vulnerability.

]]> CVE-2020-11107 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-11107/ Sun, 26 Feb 2023 06:36:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-11107/ An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.

The post CVE-2020-11107 appeared first on CVE Vulnerability.

]]> An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.

The post CVE-2020-11107 appeared first on CVE Vulnerability.

]]> CVE-2019-8920 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8920/ Sun, 26 Feb 2023 06:34:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8920/ iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.

The post CVE-2019-8920 appeared first on CVE Vulnerability.

]]> iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.

The post CVE-2019-8920 appeared first on CVE Vulnerability.

]]> CVE-2019-8923 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8923/ Sun, 26 Feb 2023 06:34:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8923/ XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.

The post CVE-2019-8923 appeared first on CVE Vulnerability.

]]> XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.

The post CVE-2019-8923 appeared first on CVE Vulnerability.

]]> CVE-2019-8924 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8924/ Sun, 26 Feb 2023 06:34:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8924/ XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued.

The post CVE-2019-8924 appeared first on CVE Vulnerability.

]]> XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued.

The post CVE-2019-8924 appeared first on CVE Vulnerability.

]]> CVE-2022-29376 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-29376/ Thu, 23 Feb 2023 05:18:26 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-29376/ Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.

The post CVE-2022-29376 appeared first on CVE Vulnerability.

]]> Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.

The post CVE-2022-29376 appeared first on CVE Vulnerability.

]]>