XAMPP Multiple Vulnerabilities June 2009

XAMPP is prone to multiple vulnerabilities. 1. showcode.php Local File Include Vulnerability An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks. 2. Multiple Cross Site Scripting Vulnerabilitie...

XAMPP <= 1.6.8 Multiple Vulnerabilities (Jun 2009)

XAMPP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apachefriends:xampp"; if description...

Multiple vulnerabilities in XAMPP

No description provided by source. I am continue informing you about multiple vulnerabilities in XAMPP. ----------------------------- Advisory 7 ----------------------------- CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP ----------------------------- URL:...

XAMPP Cross Site Request Forgery / Cross Site Scripting / Path Disclosure / SQL Injection / Traversal

I want to warn you about multiple vulnerabilities in XAMPP. I disclosed at my site multiple vulnerabilities in XAMPP in 2009 in total 7 advisories. And informed developers about them. Also I published these vulnerabilities at securityvulns.ru securityvulns.com. And now I'm informing you about the...

Tender System 0.9.5b - Local File Inclusion

Tender System 0.9.5b - Local File Inclusion . . \ \ | | / | | / / || | | /\ \ / | |/ // \ / |/ \ \ \ | \ | | / \ | | \ | \ |\ /| || / / / / / / / / / ------------------------------------------------------------------------------------------- Note: TESTED LOCALLY WITH XAMPP FOR...

Tender System 0.9.5b LFI

Exploit for unknown platform in category web applications ======================== Tender System 0.9.5b LFI ======================== . . \ \ | | / | | / / || | | /\ \ / | |/ // \ / |/ \ \ \ | \ | | / \ | | \ | \ |\ /| || / / / / / / / / /...

Tender System 0.9.5b LFI

No description provided by source. . . \ \ | | / | | / / || | | /\ \ / | |/ // \ / |/ \ \ \ | \ | | / \ | \ /| | / // \ / / | | | Y \ || /\ | \ | \ |\ /| || / / / / / / / / / ------------------------------------------------------------------------------------------- Note: TESTED...

XAMPP 1.7.2 Change Administrative Password

Exploit for unknown platform in category web applications ========================================== XAMPP 1.7.2 Change Administrative Password ========================================== Title: XAMPP 1.7.2 Change Administrative Password Date: 11/12/2009 Author: bi0 Software Link:...

XAMPP 1.7.2 Change Administrative Password

No description provided by source. Title: XAMPP 1.7.2 Change Administrative Password Date: 11/12/2009 Author: bi0 Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 1.7.2 Tested on: Windows XP / Windows Vista CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // //...

XAMPP 1.7.2 - Change Administrative Password

XAMPP 1.7.2 - Change Administrative Password Title: XAMPP 1.7.2 Change Administrative Password Date: 11/12/2009 Author: bi0 Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 1.7.2 Tested on: Windows XP / Windows Vista CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ ...

XAMPP 1.7.2 - Change Administrative Password

Title: XAMPP 1.7.2 Change Administrative Password Date: 11/12/2009 Author: bi0 Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 1.7.2 Tested on: Windows XP / Windows Vista CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // //...

XAMPP 1.7.2 Administrative Bypass

/\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // ---------------------------------------------------------------- x XAMPP 1.7.2 Change Administrative Password x Author : bi0 x Contact : [email protected] + Download : http://www.apachefriends.org/en/xampp-windows.html...

CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP. These are Cross-Site Request Forgery, SQL Injection and Full path disclosure vulnerabilities. CSRF: http://site/xampp/cds-fpdf.php It's possible to delete or add data in test table as via CSRF, and as via Insufficient...

Cross-Site Scripting, CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP which I found at 23.06.2009. These are Cross-Site Scripting, Cross-Site Request Forgery, SQL Injection and Full path disclosure vulnerabilities. XSS:...

Cross-Site Scripting and Insufficient Anti-automation vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP. These are Cross-Site Scripting and Insufficient Anti-automation vulnerabilities. XSS: http://site/xampp/iart.php?text=223E3Cscript3Ealertdocument.cookie3C/script3E Insufficient Anti-automation:...

Vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about security vulnerabilities in XAMPP. These are Information Leakage, Cross-Site Request Forgery and SQL Injection vulnerabilities. Information Leakage: http://site/xampp/phpinfo.php During access to admin panel via Insufficient Authorization vulnerabilities it'...

Insufficient Authentication, XSS and SQL Injection vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about security vulnerabilities in XAMPP. These are Insufficient Authentication, Cross-Site Scripting and SQL Injection vulnerabilities. Insufficient Authentication: http://site/xampp/ There are such sites, where access to admin panel of XAMPP is not restricted by...

Multiple vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in XAMPP. These are Predictable Resource Location, Information Leakage, Cross-Site Scripting and Directory Traversal vulnerabilities. Predictable Resource Location: There are standard paths to resources in XAMPP, which can b...

XAMPP 1.6.x - showcode.php Local File Inclusion

XAMPP 1.6.x - showcode.php Local File Inclusion source: https://www.securityfocus.com/bid/37999/info XAMPP is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this vulnerability to obtain potentially sensitive...

XAMPP 1.6.x - 'showcode.php' Local File Inclusion

source: https://www.securityfocus.com/bid/37999/info XAMPP is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts ...