Approved changes feed: RSS · Atom

cpe:2.3:a:xampp:apache_distribution:*:*:windows:*:*:*:*:*

part: a version: * update: *

VendorXampp (f64f1967-e66a-53eb-a8a8-a19b0996f40b)
ProductApache Distribution (c75125da-9b61-527b-912f-0c1f8a78672d)
Editionwindows
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47637 vulnerable 2026-06-08 05:50:40.850241 Details available
The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory. Common use cases execute files under C:\xampp with administrative privileges.
Published: 2023-09-12T00:00:00.000Z
Updated: 2024-09-26T15:17:41.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2079 vulnerable 2026-06-08 04:49:44.125416 Details available
The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the database server hostname, which allows remote attackers to trigger a library buffer overflow and execute arbitrary code via a long host parameter, or have other unspecified impact. NOTE: it could be argued that this is an issue in mssql_connect (CVE-2007-1411.1) in PHP, or an issue in the ADOdb Library, and the proper fix should be in one of these products; if so, then this should not be treated as a vulnerability in XAMPP.
Published: 2007-04-18T02:20:00.000Z
Updated: 2024-08-07T13:23:49.972Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.