CVE-2008-3569: XSS
Published Aug 10, 2008
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.php and (2) ming.php.
Affected Software
1 affected component
Apache Friends Xampp=1.6.7
Event History
Aug 10, 2008
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3569?
CVE-2008-3569 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-3569?
To fix CVE-2008-3569, disable register_globals in the PHP configuration and ensure to validate and sanitize user input.
3
What applications are affected by CVE-2008-3569?
CVE-2008-3569 affects XAMPP version 1.6.7 when register_globals is enabled.
4
Can CVE-2008-3569 be exploited remotely?
Yes, CVE-2008-3569 can be exploited remotely by attackers to inject malicious web scripts.
5
What components of XAMPP are affected by CVE-2008-3569?
The affected components in XAMPP for CVE-2008-3569 include iart.php and ming.php.