Main
Vulnerability Database
Exploits
ID:4005 - Exploit for Cross-site scripting in XAMPP - CVE-2013-2586
ID:4005 - Exploit for Cross-site scripting in XAMPP - CVE-2013-2586
Published: August 11, 2020
Vulnerability identifier: #VU41274
Vulnerability risk: Low
CVE-ID: CVE-2013-2586
CWE-ID: CWE-79
Exploitation vector: Remote access
Vulnerable software:
XAMPP
XAMPP
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to manipulate data.
XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.
Remediation
Install update from vendor's website.