|
XAMPP Cross-Site Scripting and Request Forgery Vulnerabilities
|
|
Secunia Advisory:
|
SA32134
|
|
|
Release Date:
|
2008-10-03
|
|
Last Update:
|
2008-12-09
|
|
Popularity:
|
1,459 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Cross Site Scripting
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| Software: | XAMPP 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
| | CVE reference: | CVE-2008-4450
|
|
Description:
Some vulnerabilities have been discovered in XAMPP, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks.
1) Input passed to the "dbserver", "host", "user", "password", "database", and "table" parameters in xmapp/adodb.php is not properly sanitised before being returned to a user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
2) The xampp/security/xamppsecurity.php script allows administrators to perform certain actions via HTTP requests without performing proper validity checks to verify the request. This can be exploited to e.g. change the login credentials when a logged-in administrator visits a malicious web site.
The vulnerabilities are confirmed in version 1.6.8 (Windows Installer). Other versions may also be affected.
Solution:
Edit the source code to ensure that input is properly sanitised and requests are probably verified.
Provided and/or discovered by:
1) Jaykishan Nirmal, Aujas Networks
2) Michael Brooks
Changelog:
2008-10-07: Added CVE reference.
2008-12-09: Updated advisory to include vulnerability #2.
Original Advisory:
2) http://milw0rm.com/exploits/7384
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
8th Jan, 2009
|
New advisories:
|
24 |
|
New vulnerabilities:
|
99 |
|
Updated advisories:
|
26 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 Solutions | More...
|
|
