EIP-2026-119303

PRE-CVE

XAMPP 1.7.4 - Cross-Site Scripting

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119303. PoCs published by Sangteamtham.

AI-analyzed exploit summary The provided text describes multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.7.4 for Windows and prior versions. It includes example URLs demonstrating how an attacker could inject arbitrary script code via unsanitized user input in the 'text' parameter of 'ming.php' and the path of 'cds.php'.

Description

XAMPP 1.7.4 - Cross-Site Scripting

Exploits (1)

exploitdb WRITEUP VERIFIED
by Sangteamtham · textremotewindows
https://www.exploit-db.com/exploits/36258

The provided text describes multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.7.4 for Windows and prior versions. It includes example URLs demonstrating how an attacker could inject arbitrary script code via unsanitized user input in the 'text' parameter of 'ming.php' and the path of 'cds.php'.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: XAMPP 1.7.4 for Windows and prior
No auth needed
Prerequisites: Access to the vulnerable XAMPP installation · Ability to craft malicious URLs with XSS payloads
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026