Vulnerabilities > Wampserver > High

DATE CVE VULNERABILITY TITLE RISK
2022-08-30 CVE-2022-36565 Unspecified vulnerability in Wampserver
Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
network
low complexity
wampserver
8.8
2018-03-25 CVE-2018-8817 Cross-Site Request Forgery (CSRF) vulnerability in Wampserver
Wampserver before 3.1.3 has CSRF in add_vhost.php.
network
low complexity
wampserver CWE-352
8.8
2016-12-27 CVE-2016-10072 Permissions, Privileges, and Access Controls vulnerability in Wampserver 3.0.6
WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify.
local
high complexity
wampserver CWE-264
7.5
2016-12-27 CVE-2016-10031 Permissions, Privileges, and Access Controls vulnerability in Wampserver 3.0.6
WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges.
local
high complexity
wampserver CWE-264
7.5