Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ApacheFriends XAMPP 'security/xamppsecurity.php'代码注入漏洞
Vulnerability Description
XAMPP是一个易于安装的Apache web服务器集成包(MySQL和PHP，Perl中，FTP服务器和phpMyAdmin)，并支持各种操作系统包括：Linux，Solaris，Windows和Mac OS X。 XAMPP 1.6.8版本的security/xamppsecurity.php在SERVER superglobal数组上执行一项提取操作，这会允许远程攻击者骗取关键自变量，例如通过设置REMOTE_ADDR自变量成127.0.0.1。
CVSS Information
N/A
Vulnerability Type
N/A