漏洞描述 【漏洞对象】XAMPP 【涉及版本】1.6.x 【漏洞描述】该系统'showcode.php'文件存在本地文件包含漏洞;开发人员为了使代码更灵活,会将被包含的文件设置为变量,用来进行动态调用,从而导致客户端可以恶意调用一个恶意文件,造成文件包含漏洞。
相关漏洞推荐 ERG2 1350W 路由器默认口令漏洞 AirCam IP 150CAM 摄像头默认口令漏洞 畅捷通-TPlus /tplus/ajaxpro/ASP_sm_setupaccount_versionupdate_selectbackupfileonserver_aspx App_Web_selectbackupfileonserver.aspx.1cbd2a00.ashx 目录遍历漏洞 WordPress Yoco Payments plugin /wp-json/yoco/logs 目录遍历漏洞(CVE-2025-13801) POC CVE-2012-10018: WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload POC CVE-2024-24882: Masteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalation POC CVE-2024-29138: WordPress Restrict User Access <= 2.5 - Cross-Site Scripting POC CVE-2025-52691: SmarterMail - Unrestricted File Upload POC CVE-2025-60188: Atarim < 4.2.2 - Sensitive Information Exposure POC CVE-2006-3392: Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure POC CVE-2011-3600: Apache OFBiz - XML External Entity Injection POC CVE-2015-8350: WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSS POC CVE-2016-15043: WP Mobile Detector <= 3.5 - Unrestricted File Upload