CVE-2008-6498

Description

Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter.

Affected products

• Apachefriends / XAMPP1.6.8 – 1.6.8

References

• EXPLOIThttps://www.exploit-db.com/exploits/7384
• VENDOR_ADVISORYhttp://secunia.com/advisories/32134
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/47201