XAMPP 1.7.2 - Change Administrative Password

XAMPP 1.7.2 - Change Administrative Password Title: XAMPP 1.7.2 Change Administrative Password Date: 11/12/2009 Author: bi0 Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 1.7.2 Tested on: Windows XP / Windows Vista CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ ...

XAMPP 1.7.2 Administrative Bypass

/\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // ---------------------------------------------------------------- x XAMPP 1.7.2 Change Administrative Password x Author : bi0 x Contact : [email protected] + Download : http://www.apachefriends.org/en/xampp-windows.html...

CVE-2008-6499

security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTEADDR variable to 127.0.0.1...

CVE-2008-6498: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter...

CVE-2008-6499: Improper Control of Generation of Code

security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTEADDR variable to 127.0.0.1...