Lucene search
HistorySep 29, 2014 - 10:55 p.m.
CVE-2013-2586
cve-2013-2586
xampp
access restriction
remote attack
cross-site scripting
xss
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
75.0%
XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.
Affected configurations
Node
apachefriendsxamppMatch1.8.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| apachefriends:xampp | apachefriends xampp | eq | 1.8.1 |
Related
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-10-01 00:00:00
XAMPP 1.8.1 Local Write Access Vulnerability
2013-10-01 00:00:00
nvd
nvd
CVE-2013-2586
2014-09-29 22:55:07
seebug
seebug
xampp 1.8.1 ไปปๆๆไปถๅๅ
ฅๆผๆด
2013-10-09 00:00:00
exploitpack
exploitpack
XAMPP 1.8.1 - lang.php?WriteIntoLocalDisk method Local Write Access
2013-09-30 00:00:00
prion
prion
Cross site scripting
2014-09-29 22:55:00
cvelist
cvelist
CVE-2013-2586
2014-09-29 22:00:00
packetstorm
packetstorm
XAMPP 1.8.1 Local Write Access
2013-09-26 00:00:00
openvas
openvas
XAMPP < 1.8.2 Local Write Access Vulnerability (Oct 2014) - Active Check
2014-10-10 00:00:00
zdt
zdt
XAMPP 1.8.1 Local Write Access Vulnerability
2013-09-26 00:00:00
exploitdb
exploitdb
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
75.0%
Related for CVE-2013-2586