CVE-2013-2586: Improper Neutralization of Input During Web Page Generation

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting XSS attacks via the WriteIntoLocalDisk method...

PT-2014-2595

Name of the Vulnerable Software and Affected Versions XAMPP version 1.8.1 Description The issue allows remote attackers to execute cross-site scripting XSS attacks by modifying xampp/lang.tmp via the WriteIntoLocalDisk method due to improper access restriction to xampp/lang.php. Recommendations F...