1164 matches found
XAMPP For Windows Cross Site Scripting
XAMPP for Windows Xss/PHPinfo Multiple Vulnerability AUTHOR : Cru3l.b0y DATE : 05 APR 2009 SITE : WwW.DeltaHacking.Net CONTACT : [email protected] APPLICATION : XAMPP for Windows VERSION : 1.4.9 , 1.5.0 , 1.5.1 , 1.6.4 DOWNLO : http://www.apachefriends.org/en/xampp-windows.html VENDOR :...
Cross-Site Scripting vulnerability in XAMPP
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в XAMPP. XSS: Уязвимость в xamppsecurity.php. http://websecurity.com.ua/uploads/2009/XAMPP20XSS.html Уязвимы XAMPP 1.6.8 и предыдущие версии. И потенциально следующие версии включительно с последней версией XAMPP...
XAMPP 1.6.x - Multiple Cross-Site Scripting Vulnerabilities
XAMPP 1.6.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37997/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...
XAMPP 1.6.x - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37997/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
XAMPP Detection (HTTP)
HTTP based detection of XAMPP. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900526";...
XAMPP Multiple Cross-Site Request Forgery Vulnerability
The host is installed with XAMPP and is prone to multiple cross-site request forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodxamppmultcsrfvuln.nasl 5676 2017-03-22 16:29:37Z cfi $ XAMPP Multiple Cross-Site Request Forgery Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...
XAMPP < 1.7.3 Multiple CSRF Vulnerabilities
XAMPP is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter...
Code injection
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTEADDR variable to 127.0.0.1...
CVE-2008-6499
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTEADDR variable to 127.0.0.1...
CVE-2008-6498
Cross-site request forgery CSRF vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter...
CVE-2008-6498
XAMPP 1.6.8 is affected by a CSRF vulnerability in security/xamppsecurity.php that lets an attacker hijack the user’s authenticated session to change the .htaccess password via the xampppasswd parameter. This vulnerability is identified as CVE-2008-6498. Public references in the provided document...
CVE-2008-6499
CVE-2008-6499 affects XAMPP 1.6.8, where security/xamppsecurity.php performs an extract operation on the SERVER superglobal. This allows remote attackers to spoof critical variables, demonstrated by altering REMOTE_ADDR to 127.0.0.1. The root cause is improper handling of server variables during ...
CVE-2008-6499
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTEADDR variable to 127.0.0.1...
CVE-2008-6498: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter...
CVE-2008-6499: Improper Control of Generation of Code
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTEADDR variable to 127.0.0.1...
Default credentials
XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via 1 the "lampp" default password for the "nobody" account within the included ProFTPD installation, 2 a blank default password for the "root" account within the included...
CVE-2009-0919
XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via 1 the "lampp" default password for the "nobody" account within the included ProFTPD installation, 2 a blank default password for the "root" account within the included...
CVE-2009-0919
The CVE-2009-0919 entry describes insecure default credentials in XAMPP bundles, enabling remote access through (1) lampp/default password for the nobody account in ProFTPD, (2) a blank root password in the included MySQL installation, and (3) a blank pma password in phpMyAdmin, among potentially...
CVE-2009-0919
XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via 1 the "lampp" default password for the "nobody" account within the included ProFTPD installation, 2 a blank default password for the "root" account within the included...