Browse CVEs

HIGH 8.8 CVE-2022-36565 Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via o… Wampserver after 3.2.6 Fix from $1,9502022-08-30 MEDIUM 6.5 CVE-2019-11517 WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomplete. An att… Wampserver 3.1.9+ Fix from $1,6002019-06-10 MEDIUM 6.1 CVE-2018-1000848 Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in index.php localhost page that can result in very low… Wampserver 3.1.5+ Fix from $1,6002018-12-20 HIGH 8.8 CVE-2018-8817 Wampserver before 3.1.3 has CSRF in add_vhost.php. Wampserver 3.1.3+ Fix from $1,9502018-03-25 MEDIUM 5.4 CVE-2018-8732 Cross-site scripting (XSS) vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtual_del param… Wampserver No fix yet Fix from $1,6002018-03-19 HIGH 7.5 CVE-2016-10031 WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could po… Wampserver No fix yet Fix from $1,9502016-12-27 MEDIUM 5.3 CVE-2016-10072 WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but… Wampserver No fix yet Fix from $1,6002016-12-27