XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote malicious users to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apachefriends xampp 1.8.1 |