CVE-2008-3569 Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.p...
MediumCVSS 4.3
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.php and (2) ming.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache friends xampp | = 1.6.7 | No fix listed |
References
- 4127 third-party-advisory
- 20080804 Xampp Linux 1.6.7 Multiple Cross Site Scripting Vulnerabilities mailing-list
- 30535 vdb-entry
- xampp-text-xss(44214) vdb-entry