EDB-46424

PoC

XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Rafael Pedreropublished 2019-02-19catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-8924US	medium6.1	5.67% (93rd)	Exploit	2019-05-17
XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued.
CVE-2019-8923US	critical9.8	3.90% (90th)	Exploit	2019-05-14
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.