Apachefriends

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Apachefriends records in CISA KEV

No Apachefriends vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xampp 13 records HIGH

Records

13 records in Xampp · all components

TI-2017-14089 CVE-2017-20018 · GHSA-63vx-4gcw-7q7w

XAMPP Installer uncontrolled search path

HIGH 67

A vulnerability was found in XAMPP 7.1.1-0-VC14.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00635 Published 2022-06-09 No fix listed CWE-427

TI-2020-08980 CVE-2020-11107 · GHSA-x3gf-hh36-p3pf

An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before…

MEDIUM 58

An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2247 Published 2020-04-02 No fix listed CWE-732

TI-2019-06436 CVE-2019-8923 · GHSA-69f6-hpgc-3h8f

XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter.

MEDIUM 49

XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03903 Published 2019-05-14 No fix listed CWE-89

TI-2009-00873 CVE-2009-0919 · GHSA-59v4-7p7v-xmg9

XAMPP installs multiple packages with insecure default passwords, which makes it easier…

MEDIUM 46

XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "lampp" default password for the "nobody" account within the included ProFTPD inst…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.10999 Published 2009-03-16 No fix listed CWE-255

TI-2024-00306 CVE-2024-0338 · GHSA-g3q6-pqr4-w43v

Buffer Overflow Vulnerability in XAMPP

MEDIUM 43

A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00465 Published 2024-02-02 No fix listed CWE-119

TI-2022-11861 CVE-2022-29376 · GHSA-4q7h-5rhf-q8ch

Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its…

MEDIUM 41

Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01455 Published 2022-05-23 No fix listed CWE-276

TI-2019-06437 CVE-2019-8924 · GHSA-5846-c6j6-c6fx

XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter.

LOW 36

XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.05665 Published 2019-05-17 No fix listed CWE-79

TI-2008-06188 CVE-2008-6498 · GHSA-qr4m-2pp8-q46q

Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP…

LOW 32

Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xam…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01049 Published 2009-03-20 No fix listed CWE-352

TI-2022-23665 CVE-2022-47637 · GHSA-x73p-g67h-gmc8

The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp…

LOW 31

The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00257 Published 2023-09-12 No fix listed CWE-281

TI-2019-06433 CVE-2019-8920 · GHSA-w3q5-p3mp-g366

iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.

LOW 29

iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00838 Published 2019-07-09 No fix listed CWE-79

TI-2013-02289 CVE-2013-2586 · GHSA-93fc-g7mh-w7p5

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote…

LOW 28

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0521 Published 2014-09-29 No fix listed CWE-79

TI-2008-06189 CVE-2008-6499 · GHSA-6vrv-pvc8-f6cm

security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER…

LOW 28

security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 1…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01556 Published 2009-03-20 No fix listed CWE-94

TI-2006-04812 CVE-2006-4994 · GHSA-qmfr-7wrh-8x6g

Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might…

LOW 21

Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicious program file in %SYSTEMDRIVE%, which is run when XAMPP attempts to execute (1…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00378 Published 2006-09-26 No fix listed

Open these records in search →

Critical	2
High	4
Medium	7
Low	0
No CVSS	0