Read the docs
TI-2009-00873 Aliases CVE-2009-0919GHSA-59v4-7p7v-xmg9

XAMPP installs multiple packages with insecure default passwords, which makes it easier…

Priority MEDIUM 46CWE-255Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "lampp" default password for the "nobody" account within the included ProFTPD installation, (2) a blank default password for the "root" account within the included MySQL installation, (3) a blank default password for the "pma" account within the phpMyAdmin installation, and possibly other unspecified passwords. NOTE: this was originally reported as a problem in DFLabs PTK, but this issue affects any product that is installed within the XAMPP environment, and should not be viewed as a vulnerability within that product. NOTE: DFLabs states that PTK is intended for use in a laboratory with "no contact from / to internet."

Why it matters now

EPSS 0.10999 95th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 109

CPEVersionsRoleVendor
cpe:2.3:a:apachefriends:xampp:0.1:alpha:solaris:*:*:*:*:*0.1 alphaVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.1:beta:mac_os_x:*:*:*:*:*0.1 betaVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.2:alpha:solaris:*:*:*:*:*0.2 alphaVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.2:beta:mac_os_x:*:*:*:*:*0.2 betaVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.3:-:mac_os_x:*:*:*:*:*0.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.3:alpha:solaris:*:*:*:*:*0.3 alphaVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.4:-:mac_os_x:*:*:*:*:*0.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.4:alpha:solaris:*:*:*:*:*0.4 alphaVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.5:-:mac_os_x:*:*:*:*:*0.5VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.5:beta:solaris:*:*:*:*:*0.5 betaVulnerableApachefriends
  • cpe:2.3:a:apachefriends:xampp:0.1:alpha:solaris:*:*:*:*:* Versions 0.1 alpha Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.1:beta:mac_os_x:*:*:*:*:* Versions 0.1 beta Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.2:alpha:solaris:*:*:*:*:* Versions 0.2 alpha Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.2:beta:mac_os_x:*:*:*:*:* Versions 0.2 beta Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.3:-:mac_os_x:*:*:*:*:* Versions 0.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.3:alpha:solaris:*:*:*:*:* Versions 0.3 alpha Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.4:-:mac_os_x:*:*:*:*:* Versions 0.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.4:alpha:solaris:*:*:*:*:* Versions 0.4 alpha Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.5:-:mac_os_x:*:*:*:*:* Versions 0.5 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.5:beta:solaris:*:*:*:*:* Versions 0.5 beta Vulnerable ·Apachefriends
Show 99 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:apachefriends:xampp:0.6:-:mac_os_x:*:*:*:*:*0.6VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.6:beta:solaris:*:*:*:*:*0.6 betaVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.6.1:-:mac_os_x:*:*:*:*:*0.6.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.6.2:-:mac_os_x:*:*:*:*:*0.6.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.6.3:-:mac_os_x:*:*:*:*:*0.6.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.6a:-:mac_os_x:*:*:*:*:*0.6aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.7:beta:solaris:*:*:*:*:*0.7 betaVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.7.0:-:mac_os_x:*:*:*:*:*0.7.0VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.7.1:-:mac_os_x:*:*:*:*:*0.7.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.7.2:-:mac_os_x:*:*:*:*:*0.7.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.7.3:-:mac_os_x:*:*:*:*:*0.7.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.7.4:-:mac_os_x:*:*:*:*:*0.7.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.8.1:-:solaris:*:*:*:*:*0.8.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.8.2:-:solaris:*:*:*:*:*0.8.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.9:-:solaris:*:*:*:*:*0.9VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:0.9:-:windows:*:*:*:*:*0.9VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.0:-:windows:*:*:*:*:*1.0VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.0.1:-:mac_os_x:*:*:*:*:*1.0.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.1:-:windows:*:*:*:*:*1.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.2:-:linux:*:*:*:*:*1.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.2:-:windows:*:*:*:*:*1.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.3:-:linux:*:*:*:*:*1.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.3:-:windows:*:*:*:*:*1.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4:-:linux:*:*:*:*:*1.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4:-:windows:*:*:*:*:*1.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.2:-:linux:*:*:*:*:*1.4.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.2:-:windows:*:*:*:*:*1.4.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.3:-:linux:*:*:*:*:*1.4.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.3:-:windows:*:*:*:*:*1.4.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.4:-:linux:*:*:*:*:*1.4.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.4:-:windows:*:*:*:*:*1.4.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.5:-:linux:*:*:*:*:*1.4.5VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.5:-:windows:*:*:*:*:*1.4.5VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.6:-:linux:*:*:*:*:*1.4.6VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.6:-:windows:*:*:*:*:*1.4.6VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.7:-:linux:*:*:*:*:*1.4.7VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.7:-:windows:*:*:*:*:*1.4.7VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.8:-:linux:*:*:*:*:*1.4.8VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.8:-:windows:*:*:*:*:*1.4.8VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.9:-:linux:*:*:*:*:*1.4.9VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.9:-:windows:*:*:*:*:*1.4.9VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.10:-:linux:*:*:*:*:*1.4.10VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.10:-:windows:*:*:*:*:*1.4.10VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.11:-:linux:*:*:*:*:*1.4.11VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.11:-:windows:*:*:*:*:*1.4.11VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.12:-:linux:*:*:*:*:*1.4.12VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.12:-:windows:*:*:*:*:*1.4.12VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.13:-:linux:*:*:*:*:*1.4.13VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.13:-:windows:*:*:*:*:*1.4.13VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.14:-:linux:*:*:*:*:*1.4.14VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.14:-:windows:*:*:*:*:*1.4.14VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.15:-:linux:*:*:*:*:*1.4.15VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.15:-:windows:*:*:*:*:*1.4.15VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.16:-:linux:*:*:*:*:*1.4.16VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.4.16:-:windows:*:*:*:*:*1.4.16VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5:-:linux:*:*:*:*:*1.5VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.0:-:windows:*:*:*:*:*1.5.0VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.1:-:linux:*:*:*:*:*1.5.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.1:-:windows:*:*:*:*:*1.5.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.2:-:linux:*:*:*:*:*1.5.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.2:-:windows:*:*:*:*:*1.5.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.3:-:linux:*:*:*:*:*1.5.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.3:-:windows:*:*:*:*:*1.5.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.4:-:linux:*:*:*:*:*1.5.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.4:-:windows:*:*:*:*:*1.5.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.4a:-:linux:*:*:*:*:*1.5.4aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.4a:-:windows:*:*:*:*:*1.5.4aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.5:-:linux:*:*:*:*:*1.5.5VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.5:-:windows:*:*:*:*:*1.5.5VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.5.5a:-:linux:*:*:*:*:*1.5.5aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6:-:linux:*:*:*:*:*1.6VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.0:-:windows:*:*:*:*:*1.6.0VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.0a:-:windows:*:*:*:*:*1.6.0aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.1:-:linux:*:*:*:*:*1.6.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.1:-:windows:*:*:*:*:*1.6.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.2:-:linux:*:*:*:*:*1.6.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.2:-:windows:*:*:*:*:*1.6.2VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.3:-:linux:*:*:*:*:*1.6.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.3:-:windows:*:*:*:*:*1.6.3VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.3a:-:linux:*:*:*:*:*1.6.3aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.3a:-:windows:*:*:*:*:*1.6.3aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.3b:-:linux:*:*:*:*:*1.6.3bVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.4:-:linux:*:*:*:*:*1.6.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.4:-:windows:*:*:*:*:*1.6.4VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.5:-:linux:*:*:*:*:*1.6.5VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.5:-:windows:*:*:*:*:*1.6.5VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.5a:-:linux:*:*:*:*:*1.6.5aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.6:-:linux:*:*:*:*:*1.6.6VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.6:-:windows:*:*:*:*:*1.6.6VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.6a:-:windows:*:*:*:*:*1.6.6aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.7:-:linux:*:*:*:*:*1.6.7VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.7:-:windows:*:*:*:*:*1.6.7VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.8:-:windows:*:*:*:*:*1.6.8VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.6.8a:-:linux:*:*:*:*:*1.6.8aVulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.7:-:linux:*:*:*:*:*1.7VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.7:-:windows:*:*:*:*:*1.7VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.7.1:-:linux:*:*:*:*:*1.7.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:1.7.1:-:windows:*:*:*:*:*1.7.1VulnerableApachefriends
cpe:2.3:a:apachefriends:xampp:development:-:windows:*:*:*:*:*developmentVulnerableApachefriends
  • cpe:2.3:a:apachefriends:xampp:0.6:-:mac_os_x:*:*:*:*:* Versions 0.6 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.6:beta:solaris:*:*:*:*:* Versions 0.6 beta Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.6.1:-:mac_os_x:*:*:*:*:* Versions 0.6.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.6.2:-:mac_os_x:*:*:*:*:* Versions 0.6.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.6.3:-:mac_os_x:*:*:*:*:* Versions 0.6.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.6a:-:mac_os_x:*:*:*:*:* Versions 0.6a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.7:beta:solaris:*:*:*:*:* Versions 0.7 beta Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.7.0:-:mac_os_x:*:*:*:*:* Versions 0.7.0 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.7.1:-:mac_os_x:*:*:*:*:* Versions 0.7.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.7.2:-:mac_os_x:*:*:*:*:* Versions 0.7.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.7.3:-:mac_os_x:*:*:*:*:* Versions 0.7.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.7.4:-:mac_os_x:*:*:*:*:* Versions 0.7.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.8.1:-:solaris:*:*:*:*:* Versions 0.8.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.8.2:-:solaris:*:*:*:*:* Versions 0.8.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.9:-:solaris:*:*:*:*:* Versions 0.9 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:0.9:-:windows:*:*:*:*:* Versions 0.9 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.0:-:windows:*:*:*:*:* Versions 1.0 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.0.1:-:mac_os_x:*:*:*:*:* Versions 1.0.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.1:-:windows:*:*:*:*:* Versions 1.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.2:-:linux:*:*:*:*:* Versions 1.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.2:-:windows:*:*:*:*:* Versions 1.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.3:-:linux:*:*:*:*:* Versions 1.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.3:-:windows:*:*:*:*:* Versions 1.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4:-:linux:*:*:*:*:* Versions 1.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4:-:windows:*:*:*:*:* Versions 1.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.2:-:linux:*:*:*:*:* Versions 1.4.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.2:-:windows:*:*:*:*:* Versions 1.4.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.3:-:linux:*:*:*:*:* Versions 1.4.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.3:-:windows:*:*:*:*:* Versions 1.4.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.4:-:linux:*:*:*:*:* Versions 1.4.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.4:-:windows:*:*:*:*:* Versions 1.4.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.5:-:linux:*:*:*:*:* Versions 1.4.5 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.5:-:windows:*:*:*:*:* Versions 1.4.5 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.6:-:linux:*:*:*:*:* Versions 1.4.6 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.6:-:windows:*:*:*:*:* Versions 1.4.6 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.7:-:linux:*:*:*:*:* Versions 1.4.7 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.7:-:windows:*:*:*:*:* Versions 1.4.7 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.8:-:linux:*:*:*:*:* Versions 1.4.8 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.8:-:windows:*:*:*:*:* Versions 1.4.8 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.9:-:linux:*:*:*:*:* Versions 1.4.9 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.9:-:windows:*:*:*:*:* Versions 1.4.9 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.10:-:linux:*:*:*:*:* Versions 1.4.10 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.10:-:windows:*:*:*:*:* Versions 1.4.10 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.11:-:linux:*:*:*:*:* Versions 1.4.11 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.11:-:windows:*:*:*:*:* Versions 1.4.11 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.12:-:linux:*:*:*:*:* Versions 1.4.12 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.12:-:windows:*:*:*:*:* Versions 1.4.12 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.13:-:linux:*:*:*:*:* Versions 1.4.13 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.13:-:windows:*:*:*:*:* Versions 1.4.13 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.14:-:linux:*:*:*:*:* Versions 1.4.14 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.14:-:windows:*:*:*:*:* Versions 1.4.14 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.15:-:linux:*:*:*:*:* Versions 1.4.15 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.15:-:windows:*:*:*:*:* Versions 1.4.15 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.16:-:linux:*:*:*:*:* Versions 1.4.16 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.4.16:-:windows:*:*:*:*:* Versions 1.4.16 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5:-:linux:*:*:*:*:* Versions 1.5 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.0:-:windows:*:*:*:*:* Versions 1.5.0 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.1:-:linux:*:*:*:*:* Versions 1.5.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.1:-:windows:*:*:*:*:* Versions 1.5.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.2:-:linux:*:*:*:*:* Versions 1.5.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.2:-:windows:*:*:*:*:* Versions 1.5.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.3:-:linux:*:*:*:*:* Versions 1.5.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.3:-:windows:*:*:*:*:* Versions 1.5.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.4:-:linux:*:*:*:*:* Versions 1.5.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.4:-:windows:*:*:*:*:* Versions 1.5.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.4a:-:linux:*:*:*:*:* Versions 1.5.4a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.4a:-:windows:*:*:*:*:* Versions 1.5.4a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.5:-:linux:*:*:*:*:* Versions 1.5.5 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.5:-:windows:*:*:*:*:* Versions 1.5.5 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.5.5a:-:linux:*:*:*:*:* Versions 1.5.5a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6:-:linux:*:*:*:*:* Versions 1.6 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.0:-:windows:*:*:*:*:* Versions 1.6.0 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.0a:-:windows:*:*:*:*:* Versions 1.6.0a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.1:-:linux:*:*:*:*:* Versions 1.6.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.1:-:windows:*:*:*:*:* Versions 1.6.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.2:-:linux:*:*:*:*:* Versions 1.6.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.2:-:windows:*:*:*:*:* Versions 1.6.2 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.3:-:linux:*:*:*:*:* Versions 1.6.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.3:-:windows:*:*:*:*:* Versions 1.6.3 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.3a:-:linux:*:*:*:*:* Versions 1.6.3a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.3a:-:windows:*:*:*:*:* Versions 1.6.3a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.3b:-:linux:*:*:*:*:* Versions 1.6.3b Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.4:-:linux:*:*:*:*:* Versions 1.6.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.4:-:windows:*:*:*:*:* Versions 1.6.4 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.5:-:linux:*:*:*:*:* Versions 1.6.5 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.5:-:windows:*:*:*:*:* Versions 1.6.5 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.5a:-:linux:*:*:*:*:* Versions 1.6.5a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.6:-:linux:*:*:*:*:* Versions 1.6.6 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.6:-:windows:*:*:*:*:* Versions 1.6.6 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.6a:-:windows:*:*:*:*:* Versions 1.6.6a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.7:-:linux:*:*:*:*:* Versions 1.6.7 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.7:-:windows:*:*:*:*:* Versions 1.6.7 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.8:-:windows:*:*:*:*:* Versions 1.6.8 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.6.8a:-:linux:*:*:*:*:* Versions 1.6.8a Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.7:-:linux:*:*:*:*:* Versions 1.7 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.7:-:windows:*:*:*:*:* Versions 1.7 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.7.1:-:linux:*:*:*:*:* Versions 1.7.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:1.7.1:-:windows:*:*:*:*:* Versions 1.7.1 Vulnerable ·Apachefriends
  • cpe:2.3:a:apachefriends:xampp:development:-:windows:*:*:*:*:* Versions development Vulnerable ·Apachefriends

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-0919
  2. 2026-10-03 Alias added: GHSA-59v4-7p7v-xmg9

References

Patch 1

Other 3

  • TI-2017-14089 XAMPP Installer uncontrolled search path CVSS 3.1HIGH 7.8
  • TI-2020-08980 An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before… CVSS 3.1HIGH 8.8
  • TI-2019-06436 XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. CVSS 3.0CRITICAL 9.8
  • TI-2024-00306 Buffer Overflow Vulnerability in XAMPP CVSS 3.1CRITICAL 9.8
  • TI-2022-11861 Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its… CVSS 3.1HIGH 8.8
  • TI-2019-06437 XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. CVSS 3.0MEDIUM 6.1
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences