TI-2018-06362 CVE-2018-8817 · GHSA-mhm4-84m9-2m2q
Wampserver before 3.1.3 has CSRF in add_vhost.php.
Priority MEDIUM 44
Wampserver before 3.1.3 has CSRF in add_vhost.php.
Wampserver
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Wampserver records in CISA KEVNo Wampserver vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Wampserver · all components
TI-2022-16878 CVE-2022-36565 · GHSA-x25q-66jq-mfcr
Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below…
Priority MEDIUM 40
Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
TI-2016-08117 CVE-2016-10031 · GHSA-qc93-7g4r-fc4p
WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak…
Priority LOW 35
WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges.
TI-2019-08607 CVE-2019-11517 · GHSA-8hc5-v62f-53vj
WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern…
Priority LOW 29
WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomplete.
TI-2018-16069 CVE-2018-1000848 · GHSA-ggqf-g43q-xrhm
Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS)…
Priority LOW 28
Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in index.php localhost page that can result in very low.
TI-2018-06303 CVE-2018-8732 · GHSA-ccwr-xrcx-jh8m
Cross-site scripting (XSS) vulnerability in WampServer 3.1.1 allows remote attackers to…
Priority LOW 28
Cross-site scripting (XSS) vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtual_del parameter.
TI-2016-08156 CVE-2016-10072 · GHSA-vp68-3mmv-qrfm
WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak…
Priority LOW 27
WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify.
TI-2010-00668 CVE-2010-0700 · GHSA-9387-39pg-qwg6
Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote…
Priority LOW 23
Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter.