Exploit Labs Security Advisory 2005.6

------------------------------------------------------------ - EXPL-A-2005-006 exploitlabs.com Advisory 034 - ------------------------------------------------------------ - XAMPP - OVERVIEW ======== XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really ve...

XAMPP < 1.4.14 Multiple Vulnerabilities

The remote host is running XAMPP, an Apache distribution containing MySQL, PHP, and Perl. It is designed for easy installation and administration. The remote version of this software contains security flaws and password disclosure weaknesses that could allow an attacker to perform cross-site...

XAMPP Default FTP Account

The remote FTP server has an account with a known username / password combination that might have been configured when installing XAMPP. An attacker may be able to use this to gain authenticated access to the system, which could allow for other attacks against the affected application and host...

CVE-2005-1078

CVE-2005-1078 affects XAMPP 1.4.x with multiple default or null passwords. The underlying issue is default credentials in the XAMPP installation, allowing an attacker to gain privileges (attack vector: network; authentication: none; impact: partial confidentiality, integrity, and availability). T...

CVE-2005-1077

CVE-2005-1077 concerns XSS vulnerabilities in XAMPP 1.4.x , allowing remote attackers to inject arbitrary script/HTML via the endpoints cds.php , Guestbook-EN.pl , or phonebook.php . The NVD entry lists a Medium base score (4.3) with network attack vector and no authentication needed, but the doc...

CVE-2005-1078

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges...

CVE-2005-1078

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges...

CVE-2005-1077

Multiple cross-site scripting XSS vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via 1 cds.php, 2 Guestbook-EN.pl, or 3 phonebook.php...

CVE-2005-1077

Multiple cross-site scripting XSS vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via 1 cds.php, 2 Guestbook-EN.pl, or 3 phonebook.php...

XAMPP - Phonebook.php Multiple Remote HTML Injection Vulnerabilities

XAMPP - Phonebook.php Multiple Remote HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/13127/info XAMPP is prone to multiple remote HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before including it in dynamically generat...

XAMPP - Insecure Default Password Disclosure

XAMPP - Insecure Default Password Disclosure source: https://www.securityfocus.com/bid/13131/info An insecure default password disclosure vulnerability affects XAMPP. This issue is due to a failure of the application to properly secure access to default passwords. An attacker may leverage this...

XAMPP < 1.4.14 Default Installation Multiple HTML Injection (deprecated)

Binary data 2816.prm...

[Full-disclosure] XAMPP

------------------------------------------------------------ - EXPL-A-2005-006 exploitlabs.com Advisory 034 - ------------------------------------------------------------ - XAMPP - OVERVIEW ======== XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really ve...

XAMPP - Insecure Default Password Disclosure

source: https://www.securityfocus.com/bid/13131/info An insecure default password disclosure vulnerability affects XAMPP. This issue is due to a failure of the application to properly secure access to default passwords. An attacker may leverage this issue to gain access to the default passwords f...

XAMPP - 'Phonebook.php' Multiple Remote HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/13127/info XAMPP is prone to multiple remote HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may leverage these issues to execute...