CVE-2018-8817

Wampserver before 3.1.3 has CSRF in addvhost.php...

CVE-2018-8817

WampServer is affected by CSRF in add_vhost.php (CVE-2018-8817). WampServer 3.1.2 was vulnerable; versions up to 3.1.8 were still affected according to OpenVAS records, while CVE-2019-11517 notes that WampServer before 3.1.9 remains vulnerable due to incomplete remediation in the prior patch. An ...

PT-2018-18640

Name of the Vulnerable Software and Affected Versions Wampserver versions prior to 3.1.3 Description The issue concerns a CSRF vulnerability in the add vhost.php file. Recommendations For versions prior to 3.1.3, update to version 3.1.3 or later to resolve the issue...

CVE-2018-8817: Cross-Site Request Forgery (CSRF)

Wampserver before 3.1.3 has CSRF in addvhost.php...

WampServer Cross-Site Scripting Vulnerability

WampServer is an integrated installation of Apache, Mysql and PHP for the Windows platform. A cross-site scripting vulnerability exists in WampServer version 3.1.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'virtualdel' parameter...

WampServer 3.1.1 XSS Vulnerability

WampServer is prone to an XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2018-8732

Cross-site scripting XSS vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtualdel parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtualdel parameter...

CVE-2018-8732

Cross-site scripting XSS vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtualdel parameter...

CVE-2018-8732

Cross-site scripting XSS vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtualdel parameter...

CVE-2018-8732

CVE-2018-8732 describes a cross-site scripting (XSS) vulnerability in WampServer 3.1.1 that can be triggered via the virtual_del parameter, allowing remote injection of script/HTML. Multiple connected sources (Exploit-DB, exploit packs, and CVE records) confirm the vulnerability and a CSRF-exploi...

CVE-2018-8732

Cross-site scripting XSS vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtualdel parameter...

PT-2018-18604

Name of the Vulnerable Software and Affected Versions WampServer version 3.1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the virtual del parameter. This can lead to the execution of malicious scripts on the client-side...

CVE-2018-8732: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtualdel parameter...

wampserver.com XSS vulnerability

Vulnerable URL: http://wampserver.com/?s=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26342 VIP website status:| Yes Coordinated...

Wampserver Insecure File Elevation of Privilege Vulnerability

WampServer is Windows Apache Mysql PHP integrated installation environment, i.e. server software for apache, php and mysql under window. An insecure file elevation of privilege vulnerability exists in Wampserver version 3.0.6, which originates from the program's 'wampapache' and 'wampmysqld'...

WampServer Arbitrary Code Execution Vulnerability

WampServer is an integrated installation of Apache, Mysql and PHP for the Windows platform. A security vulnerability exists in the wampmanager.exe and unins000.exe files in WampServer version 3.0.6. A local attacker can replace the source file with the wampmanager.exe executable or the unins000.e...

Code injection

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...

Code injection

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

CVE-2016-10031

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...