medium6.8Public exploit code
CVE-2008-6498
Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XAMPP 1.7.2 - Change Administrative Password2009-12-11 · webapps · php · Verified
- XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)2008-12-08 · remote · windows · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apachefriends | Xampp | Version 1.6.8 |