CVE-2008-6499
XAMPP 1.6.8 - Remote Code Execution via SERVER Superglobal Variable Spoofing
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6499. PoCs published by Michael Brooks.
AI-analyzed exploit summary This exploit leverages a combination of global variable manipulation and XSRF to bypass IP-based restrictions and change the administrative password for XAMPP's security directories. It exploits the use of `extract($_POST)` to overwrite the `$_SERVER[REMOTE_ADDR]` variable, allowing an attacker to spoof their IP address as 127.0.0.1.
Description
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1.
Exploits (1)
This exploit leverages a combination of global variable manipulation and XSRF to bypass IP-based restrictions and change the administrative password for XAMPP's security directories. It exploits the use of `extract($_POST)` to overwrite the `$_SERVER[REMOTE_ADDR]` variable, allowing an attacker to spoof their IP address as 127.0.0.1.