Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
XAMPP 跨站脚本漏洞
Vulnerability Description
XAMPP是美国Apache Friends项目组开发的是一个把Apache网页服务器与PHP、Perl及MySQL集合在一起的安装包，它可帮助用户建立网页服务器。 XAMPP 1.8.1版本中存在安全漏洞，该漏洞源于程序没有正确限制对xampp/lang.php文件的访问。远程攻击者可通过‘WriteIntoLocalDisk’方法利用该漏洞修改xampp/lang.tmp文件，实施跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A