XAMPP Phonebook.PHP Multiple Remote HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13127/info XAMPP is prone to multiple remote HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may...

CVE-2005-1077

CVE-2005-1077 concerns XSS vulnerabilities in XAMPP 1.4.x , allowing remote attackers to inject arbitrary script/HTML via the endpoints cds.php , Guestbook-EN.pl , or phonebook.php . The NVD entry lists a Medium base score (4.3) with network attack vector and no authentication needed, but the doc...