CVE-2005-2043 Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xampp apache distribution | = 1.4.1 | No fix listed |
| xampp apache distribution | = 1.4.2 | No fix listed |
| xampp apache distribution | = 1.4.3 | No fix listed |
| xampp apache distribution | = 1.4.4 | No fix listed |
| xampp apache distribution | = 1.4.5 | No fix listed |
| xampp apache distribution | = 1.4.6 | No fix listed |
| xampp apache distribution | = 1.4.7 | No fix listed |
| xampp apache distribution | = 1.4.8 | No fix listed |
| xampp apache distribution | = 1.4.9 | No fix listed |
| xampp apache distribution | = 1.4.10 | No fix listed |
| xampp apache distribution | = 1.4.10a | No fix listed |
| xampp apache distribution | = 1.4.11 | No fix listed |
| xampp apache distribution | = 1.4.12 | No fix listed |
| xampp apache distribution | = 1.4.13 | No fix listed |
References
- 15735 patch third-party-advisory vendor-advisory
- sourceforge.net patch
- 13983 patch vdb-entry