CVE-2009-0919: Undefined Security Weakness

XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via 1 the "lampp" default password for the "nobody" account within the included ProFTPD installation, 2 a blank default password for the "root" account within the included...

XAMPP 1.6.8 (XSRF) Change Administrative Password Exploit

No description provided by source. XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads...

phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability-vulnerability warning-the black bar safety net

Written by Michael Brooks Special Thanks to str0ke and rGod Intr phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 3 4+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simple...

phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability

No description provided by source. Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side...

XAMPP 1.6.8 Password Exploit

XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...

XAMPP 1.6.8 (XSRF) Change Administrative Password Exploit

Exploit for unknown platform in category remote exploits ========================================================= XAMPP 1.6.8 XSRF Change Administrative Password Exploit ========================================================= XAMPP change administrative password:...

phpMyAdmin 3.1.0 - Cross-Site Request Forgery SQL Injection

phpMyAdmin 3.1.0 - Cross-Site Request Forgery SQL Injection Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit...

XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

XAMPP 1.6.8 - Cross-Site Request Forgery Change Administrative Password XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage:...

XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...

phpMyAdmin 3.1.0 - Cross-Site Request Forgery / SQL Injection

Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simpl...

CVE-2008-4450

Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...

Cross site scripting

Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-4450

CVE-2008-4450 affects XAMPP for Windows 1.6.8, where a Cross-site Scripting (XSS) vulnerability exists in adodb.php. The issue allows remote attackers to inject arbitrary web script or HTML via the following parameters: dbserver, host, user, password, database, and table. The root cause and exact...

CVE-2008-4450

Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...

XAMPP for Windows 1.6.8 - Phonebook.php SQL Injection

XAMPP for Windows 1.6.8 - Phonebook.php SQL Injection source: https://www.securityfocus.com/bid/31586/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

CVE-2008-4450: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...

XAMPP for Windows 1.6.8 - 'Phonebook.php' SQL Injection

source: https://www.securityfocus.com/bid/31586/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

XAMPP for Windows 1.6.8 - cds.php SQL Injection

XAMPP for Windows 1.6.8 - cds.php SQL Injection source: https://www.securityfocus.com/bid/31564/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

XAMPP for Windows 1.6.8 - 'cds.php' SQL Injection

source: https://www.securityfocus.com/bid/31564/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XAMPP 1.6.7, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to 1 iart.php and 2 ming.php...