Security Advisory

CVE-2013-2586

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-09-29 22:00:00

Last updated 2024-08-06 15:44:32

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.

← Browse all CVEs View on cve.org ↗