Apache Friends Xampp vulnerabilities

CVE-2012-10062 [HIGH] CWE-306 CVE-2012-10062: A vulnerability in XAMPP, developed by Apache Friends, version 1.7.3's default WebDAV configuration A vulnerability in XAMPP, developed by Apache Friends, version 1.7.3's default WebDAV configuration allows remote authenticated attackers to upload and execute arbitrary PHP code. The WebDAV service, accessible via /webdav/, accepts HTTP PUT requests using default credentials. This permits attackers to upload a malicious PHP payload and trigger its exe

CVE-2008-3569 [MEDIUM] CWE-79 CVE-2008-3569: Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.php and (2) ming.php.

CVE-2024-5055 [HIGH] CWE-400 CVE-2024-5055: Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This v Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This vulnerability exists when XAMPP attempts to process many incomplete HTTP requests, resulting in resource consumption and system crashes.

CVE-2008-4450 [MEDIUM] CWE-79 CVE-2008-4450: Cross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attac Cross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the (1) dbserver, (2) host, (3) user, (4) password, (5) database, and (6) table parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.