Apachefriends Xampp
13 CVEs affecting Apachefriends Xampp. Latest disclosed: 2024-02-02. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-8923 | Critical | 9.8 | 2019-05-14 | XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued. |
CVE-2022-29376 | High | 8.8 | 2022-05-23 | Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via o… |
CVE-2020-11107 | High | 8.8 | 2020-04-02 | An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration i… |
CVE-2024-0338 | High | 7.3 | 2024-02-02 | A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier. An attacker could execute arbitrary code through a long file debug… |
CVE-2022-47637 | Medium | 6.7 | 2023-09-12 | The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory. Common use cases execute files under C:\xampp with administrative… |
CVE-2017-20018 | Medium | 6.3 | 2022-06-09 | A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipul… |
CVE-2019-8920 | Medium | 6.1 | 2019-07-09 | iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569. |
CVE-2019-8924 | Medium | 6.1 | 2019-05-17 | XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued. |
CVE-2013-2586 | | 2014-09-29 | XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS)… | |
CVE-2008-6499 | | 2009-03-20 | security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variab… | |
CVE-2008-6498 | | 2009-03-20 | Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for… | |
CVE-2009-0919 | | 2009-03-16 | XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "lampp" default passw… | |
CVE-2006-4994 | | 2006-09-26 | Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicious program file in… |