Priority HIGH 73
A vulnerability in XAMPP, developed by Apache Friends, version 1.7.3's default WebDAV configuration allows remote authenticated attackers to upload and execute arbitrary PHP code.
Apache Friends
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Apache Friends records in CISA KEVNo Apache Friends vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2024-04695 CVE-2024-5055 · GHSA-f7fm-5pq5-rq4p
Vulnerability of uncontrolled resource consumption in XAMPP
Priority LOW 39
Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier.
TI-2008-03416 CVE-2008-3569 · GHSA-78wg-q5pf-wp99
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals…
Priority LOW 26
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.php and (2) ming.php.
TI-2008-04242 CVE-2008-4450 · GHSA-qjwc-j7rm-23wg
Cross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the (1) dbserver, (2) host, (3) user, (4) password, (5) database, and (6…