Cross-Site Scripting (XSS) Vulnerability in XAMPP 1.8.1 via xampp/lang.php

CVE-2013-2586

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.

Learn more about our Web Application Penetration Testing UK.