Xampp

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Xampp records in CISA KEV

No Xampp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Apache Distribution 5 records MEDIUM

Records

5 records

TI-2007-02000 CVE-2007-2079 · GHSA-98r7-fvm5-pv89

The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for…

MEDIUM 52

The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the database server hostname, which allows remote attackers to trigger a library buffer overflow and exe…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09691 Published 2007-04-18 No fix listed

TI-2005-01016 CVE-2005-1078 · GHSA-4gqx-298x-p3v3

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.

MEDIUM 40

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04694 Published 2005-04-12 No fix listed

TI-2007-02001 CVE-2007-2080 · GHSA-2wmm-vrhw-cf55

Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to execute arbitrary SQL commands via unspecified vectors in certain test scripts.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00974 Published 2007-04-18 No fix listed

TI-2005-01931 CVE-2005-2043 · GHSA-vpxm-g7j6-wj2p

Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to…

LOW 26

Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0164 Published 2005-06-22 No fix listed

TI-2005-01015 CVE-2005-1077 · GHSA-36pf-r3q4-hqg6

Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0175 Published 2005-04-12 No fix listed

Open these records in search →

Critical	1
High	2
Medium	2
Low	0
No CVSS	0