CVE-2008-6498

EPSS 1.0%

Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/10391unverified cve_referencewww.exploit-db.com/exploits/7384unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/32134 https://exchange.xforce.ibmcloud.com/vulnerabilities/47201 https://www.exploit-db.com/exploits/7384