CVE-2020-11107

HIGH

XAMPP <7.2.29, <7.3.16, <7.4.4 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 4 public exploits for CVE-2020-11107. PoCs published by Salman Asad, S1lkys, andripwn.

AI-analyzed exploit summary This PowerShell script exploits a local privilege escalation vulnerability in XAMPP by modifying the xampp-control.ini file to replace a legitimate executable path with a malicious payload path. The exploit leverages improper file permissions to achieve arbitrary code execution with elevated privileges.

Description

An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.

Exploits (4)

exploitdb WORKING POC
by Salman Asad · powershelllocalwindows
https://www.exploit-db.com/exploits/50337

This PowerShell script exploits a local privilege escalation vulnerability in XAMPP by modifying the xampp-control.ini file to replace a legitimate executable path with a malicious payload path. The exploit leverages improper file permissions to achieve arbitrary code execution with elevated privileges.

Classification
Working Poc 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: XAMPP < 7.2.29, 7.3.x < 7.3.16 & 7.4.x < 7.4.4
Auth required
Prerequisites: Local access to the target system · XAMPP installed with vulnerable version · Write permissions to xampp-control.ini
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WRITEUP 32 stars
by S1lkys · poc
https://github.com/S1lkys/CVE-2020-11107

This repository provides a detailed writeup and proof-of-concept for CVE-2020-11107, a vulnerability in XAMPP on Windows that allows an unprivileged user to modify the xampp-control.ini configuration file to execute arbitrary commands with elevated privileges when an administrator accesses log files.

Classification
Writeup 100%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: XAMPP before 7.2.29, 7.3.x before 7.3.16, and 7.4.x before 7.4.4 on Windows
Auth required
Prerequisites: Access to XAMPP control panel as an unprivileged user · Ability to modify the xampp-control.ini file
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WRITEUP 3 stars
by andripwn · poc
https://github.com/andripwn/CVE-2020-11107

This is a writeup detailing CVE-2020-11107, a vulnerability in XAMPP on Windows where an unprivileged user can modify the xampp-control.ini configuration file to execute arbitrary commands with elevated privileges when an admin accesses log files via the control panel.

Classification
Writeup 100%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: XAMPP before 7.2.29, 7.3.x before 7.3.16, and 7.4.x before 7.4.4 on Windows
Auth required
Prerequisites: Access to XAMPP control panel as an unprivileged user · Ability to modify xampp-control.ini
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC
by Mohnad-AL-saif · poc
https://github.com/Mohnad-AL-saif/Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

This repository contains a PowerShell script that exploits CVE-2020-11107, a local privilege escalation vulnerability in XAMPP on Windows. The exploit modifies the `xampp-control.ini` file to replace the default editor path with a malicious executable, which is executed with elevated privileges when triggered by an administrator.

Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: XAMPP < 7.2.29, 7.3.x < 7.3.16, 7.4.x < 7.4.4
No auth needed
Prerequisites: Access to a vulnerable XAMPP installation on Windows · Ability to write to `C:\xampp\xampp-control.ini` · A malicious executable placed on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/164292/XAMPP-7.4.3-Privilege-Escalation.html

Scores

CVSS v3 8.8
EPSS 0.2255
EPSS Percentile 97.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-732
Status published
Products (1)
apachefriends/xampp < 7.2.29
Published Apr 02, 2020
Tracked Since Feb 18, 2026