EDB-7384
functionalXAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)
view exploit source exploit_dbverifiedtype remoteauthor Michael Brookspublished 2008-12-08catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-6499US | medium5.5 | Exploit | ||
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated… | ||||
| CVE-2008-6498US | medium6.8 | Exploit | ||
Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan