XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...

phpMyAdmin 3.1.0 - Cross-Site Request Forgery / SQL Injection

Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simpl...

XAMPP 1.6.8 Password Exploit

XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads from sourceforge.net...

CVE-2008-4450

Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...

Cross site scripting

Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-4450

Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-4450

CVE-2008-4450 affects XAMPP for Windows 1.6.8, where a Cross-site Scripting (XSS) vulnerability exists in adodb.php. The issue allows remote attackers to inject arbitrary web script or HTML via the following parameters: dbserver, host, user, password, database, and table. The root cause and exact...

XAMPP for Windows 1.6.8 - 'Phonebook.php' SQL Injection

source: https://www.securityfocus.com/bid/31586/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

XAMPP for Windows 1.6.8 - Phonebook.php SQL Injection

XAMPP for Windows 1.6.8 - Phonebook.php SQL Injection source: https://www.securityfocus.com/bid/31586/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

XAMPP for Windows 1.6.8 - 'cds.php' SQL Injection

source: https://www.securityfocus.com/bid/31564/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

XAMPP for Windows 1.6.8 - cds.php SQL Injection

XAMPP for Windows 1.6.8 - cds.php SQL Injection source: https://www.securityfocus.com/bid/31564/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

CVE-2008-3569

Multiple cross-site scripting XSS vulnerabilities in XAMPP 1.6.7, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to 1 iart.php and 2 ming.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XAMPP 1.6.7, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to 1 iart.php and 2 ming.php...

CVE-2008-3569

CVE-2008-3569 refers to multiple XSS vulnerabilities in XAMPP 1.6.7 when register_globals is enabled. The issue allows remote attackers to inject arbitrary scripts via the text parameter to iart.php and ming.php. CVSS base score 4.3 (AV:N/AC:M/Au:N/I:P/C:N). OpenVAS notes XSS in XAMPP Linux varia...

CVE-2008-3569

Multiple cross-site scripting XSS vulnerabilities in XAMPP 1.6.7, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to 1 iart.php and 2 ming.php...

Xampp Linux 1.6.7 Multiple Cross Site Scripting Vulnerabilities

---------------------------------------------------------------- Program : Xampp Linux 1.6.7 Type : Multiple Cross Site Scripting Vulnerabilities Alert : Medium ---------------------------------------------------------------- Download From :...

XAMPP Multiple XSS Vulnerabilities - Linux

XAMPP is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LoveCMS 1.6.2 Final - Update Settings

LoveCMS 1.6.2 Final - Update Settings !/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- pomdapimpatgmaildotcom LoveCMS Exploit Series Episode 3: changing site settings ... Description: Simply change the site settings ! Usage: ./LoveCMS3settings.rb Ex: ./LoveCMS2themes.rb...

LoveCMS 1.6.2 Final - Update Settings

!/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- pomdapimpatgmaildotcom LoveCMS Exploit Series Episode 3: changing site settings ... Description: Simply change the site settings ! Usage: ./LoveCMS3settings.rb Ex: ./LoveCMS2themes.rb http://site.com/lovecms/ Tested on: lovecms1.6.2final...

XAMPP Example Pages Detection

The remote web server makes available example scripts from XAMPP, an easy-to-install Apache distribution containing MySQL, PHP, and Perl. Allowing access to these examples is not recommended since some are known to disclose sensitive information about the remote host and others may be affected by...