PatchTheCVExampp vulnerabilities
Recent CVEs affecting xampp products. 5 tracked.
xampp has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-04-18. Highest priority: CVE-2007-2079 (score 66/100).
- CVE-2007-2080 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to execute arbitrary
- CVE-2007-2079 HIGH 9.3 UPGRADE The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted inpu
- CVE-2005-2043 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and
- CVE-2005-1078 HIGH 7.5 DOWNGRADE XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.
- CVE-2005-1077 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary
FAQ
How do I fix xampp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xampp being exploited right now?
None of the tracked xampp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xampp CVE should I patch first?
CVE-2007-2079 currently ranks highest (66/100): The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted inpu.