Code injection

2009-03-2000:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.1%

JSON

security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1.

CPENameOperatorVersion
xamppeq1.6.8

CPE	Name	Operator	Version
	xampp	eq	1.6.8

References

exchange.xforce.ibmcloud.com/vulnerabilities/47202

www.exploit-db.com/exploits/7384