CVE

Id
36616  
CVE No.
CVE-2008-6499  
Status
Candidate  
Description
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1.  
Phase
Assigned (20090319)  
Votes
None (candidate not yet proposed)  
Comments