CVE-2020-11107
30Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 22%
from disclosure to weapon1 days
Published on NVDApr 2
1st PoC+1d
exploitation probability
22%top 3% of all CVEs
observed exploitation
nono source reports it
5 public exploit(s)
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.
Affected products
n/a · n/apublic PoCs found — 5
exploitdbwww.exploit-db.com/exploits/50337unverifiedgithubgithub.com/S1lkys/CVE-2020-11107★ 31githubgithub.com/andripwn/CVE-2020-11107★ 4githubgithub.com/Mohnad-AL-saif/Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation★ 0cve_referencepacketstormsecurity.com/files/164292/XAMPP-7.4.3-Privilege-Escalation.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.