CVE-2008-3569
XAMPP 1.6.7 - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.php and (2) ming.php.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Khashayar Fereidani · textremotelinux
https://www.exploit-db.com/exploits/32165
exploitdb
WORKING POC
VERIFIED
by Khashayar Fereidani · textremotelinux
https://www.exploit-db.com/exploits/32166
References (4)
Scores
EPSS
0.0133
EPSS Percentile
79.7%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
apache_friends/xampp
Timeline
Published
Aug 10, 2008
Tracked Since
Feb 18, 2026