Vulnerabilities > Xampp > Apache Distribution > 1.4.13

DATE CVE VULNERABILITY TITLE RISK
2005-06-17 CVE-2005-2043 Directory Traversal vulnerability in XAMMP
Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php.
network
low complexity
xampp
5.0
2005-04-12 CVE-2005-1078 Unspecified vulnerability in Xampp Apache Distribution
XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.
network
low complexity
xampp
7.5
2005-04-12 CVE-2005-1077 Remote HTML Injection vulnerability in XAMPP CDS.PHP
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php.
network
xampp
4.3