CVE-2008-3569

XAMPP 1.6.7 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.php and (2) ming.php.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Khashayar Fereidani · textremotelinux
https://www.exploit-db.com/exploits/32165
exploitdb WORKING POC VERIFIED
by Khashayar Fereidani · textremotelinux
https://www.exploit-db.com/exploits/32166

Scores

EPSS 0.0133
EPSS Percentile 79.7%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

apache_friends/xampp

Timeline

Published Aug 10, 2008
Tracked Since Feb 18, 2026