TI-2017-14089 CVE-2017-20018 · GHSA-63vx-4gcw-7q7w
XAMPP Installer uncontrolled search path
Priority HIGH 67
A vulnerability was found in XAMPP 7.1.1-0-VC14.
Apachefriends
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Apachefriends records in CISA KEVNo Apachefriends vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records
TI-2020-08980 CVE-2020-11107 · GHSA-x3gf-hh36-p3pf
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before…
Priority MEDIUM 58
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows.
TI-2019-06436 CVE-2019-8923 · GHSA-69f6-hpgc-3h8f
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter.
Priority MEDIUM 49
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter.
TI-2009-00873 CVE-2009-0919 · GHSA-59v4-7p7v-xmg9
XAMPP installs multiple packages with insecure default passwords, which makes it easier…
Priority MEDIUM 46
XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "lampp" default password for the "nobody" account within the included ProFTPD inst…
TI-2024-00306 CVE-2024-0338 · GHSA-g3q6-pqr4-w43v
Buffer Overflow Vulnerability in XAMPP
Priority MEDIUM 43
A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier.
TI-2022-11861 CVE-2022-29376 · GHSA-4q7h-5rhf-q8ch
Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its…
Priority MEDIUM 41
Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.
TI-2019-06437 CVE-2019-8924 · GHSA-5846-c6j6-c6fx
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter.
Priority LOW 36
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter.
TI-2008-06188 CVE-2008-6498 · GHSA-qr4m-2pp8-q46q
Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP…
Priority LOW 32
Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xam…
TI-2022-23665 CVE-2022-47637 · GHSA-x73p-g67h-gmc8
The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp…
Priority LOW 31
The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory.
TI-2019-06433 CVE-2019-8920 · GHSA-w3q5-p3mp-g366
iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.
Priority LOW 29
iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.
TI-2013-02289 CVE-2013-2586 · GHSA-93fc-g7mh-w7p5
XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote…
Priority LOW 28
XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.
TI-2008-06189 CVE-2008-6499 · GHSA-6vrv-pvc8-f6cm
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER…
Priority LOW 28
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 1…
TI-2006-04812 CVE-2006-4994 · GHSA-qmfr-7wrh-8x6g
Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might…
Priority LOW 21
Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicious program file in %SYSTEMDRIVE%, which is run when XAMPP attempts to execute (1…