1164 matches found
CVE-2019-8924
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued...
Design/Logic Flaw
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued...
CVE-2019-8924
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued...
CVE-2019-8924
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued...
CVE-2019-8924
CVE-2019-8924 affects XAMPP for Windows up to version 5.6.8, with a Cross‑Site Scripting (XSS) vulnerability in the cds-fpdf.php script. The vulnerability is triggered via the interpret or titel parameters, allowing script injection in affected deployments. The associated documents consistently n...
PT-2019-19260
Name of the Vulnerable Software and Affected Versions XAMPP versions prior to 5.6.8 Description The issue allows for XSS attacks via the cds-fpdf.php file, specifically through the interpret or titel parameters. This product has been discontinued. Recommendations For versions prior to 5.6.8,...
CVE-2019-8924: Improper Neutralization of Input During Web Page Generation
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued...
CVE-2019-8923
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued...
CVE-2019-8923
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued...
Sql injection
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued...
CVE-2019-8923
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued...
CVE-2019-8923
CVE-2019-8923 affects XAMPP 5.6.8 and earlier. The vulnerability is a SQL injection in the cds-fpdf.php jahr parameter, allowing remote input-based database querying due to insufficient input validation. Impact is listed as high to critical in sources (NVD CVSS 2.0/3.0), with potential for unauth...
PT-2019-19259
Name of the Vulnerable Software and Affected Versions XAMPP versions prior to 5.6.8 Description The issue allows SQL injection via the jahr parameter in the cds-fpdf.php file. This product has been discontinued. Recommendations For versions prior to 5.6.8, consider restricting access to the...
CVE-2019-8923: Improper Neutralization of Special Elements used in an SQL Command
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued...
Exploit for Unrestricted Upload of File with Dangerous Type in Atutor
ATutor-Instructor-Backup-Exploit - Exploit Title: ATutor 2.2...
PhreeBooks ERP 5.2.3 Remote Command Execution
Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Date: 2010-04-03 Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3 Category: Webapps Tested on: XAMPP for Linux 5.6.38...
phpFileManager 1.7.8 Local File Inclusion
Exploit Title: phpFileManager 1.7.8 - Local File Inclusion Date: 01.04.2019 Exploit Author: Murat Kalafatoglu Vendor Homepage: https://sourceforge.net/projects/phpfm/ Software Demo: https://phpfm-demo.000webhostapp.com/ Version: v1.7.8 Category: Webapps Tested on: XAMPP for Linux Description: Any...
phpFileManager 1.7.8 - Local File Inclusion Exploit
Exploit for php platform in category web applications Exploit Title: phpFileManager 1.7.8 - Local File Inclusion Exploit Author: Murat Kalafatoglu Vendor Homepage: https://sourceforge.net/projects/phpfm/ Software Demo: https://phpfm-demo.000webhostapp.com/ Version: v1.7.8 Category: Webapps Tested...
XAMPP cds-fpdf.php Multiple Vulnerabilities (CVE-2019-8923; CVE-2019-8924)
SQL injection and Cross-site scripting vulnerabilities exist in XAMPP. Successful exploitation of these vulnerabilities would allow remote attackers to inject SQL commands or arbitrary web script into the affected system...
XAMPP SQL Injection Vulnerability
XAMPP Apache + MySQL + PHP + PERL is a build XAMPP software station integration package. XAMPP suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...