high8.8Public exploit code
CVE-2020-11107
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XAMPP 7.4.3 - Local Privilege Escalation2021-09-27 · local · windows
Impact
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apachefriends | Xampp | before 7.2.29 from 7.3.0 before 7.3.16 from 7.4.0 before 7.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164292/XAMPP-7.4.3-Privilege-Escalation.html
- https://www.apachefriends.org/blog/new_xampp_20200401.html
- http://packetstormsecurity.com/files/164292/XAMPP-7.4.3-Privilege-Escalation.html
- https://www.apachefriends.org/blog/new_xampp_20200401.html