Attack on Webdev Xampp

XAMPP WebDAV vulnerability example in this OWASP slide - Web attack in the wild.

https://www.owasp.org/index.php/Spain/Meetings (Sepanyol lah pulak)

Slide download :-

https://www.owasp.org/images/a/a7/Web_attacks_in_the_wild_-_ap.pdf

This is XAMPP latest vulnerability.

http://www.apachefriends.org/f/viewtopic.php?f=16&t=43824

http://www.apachefriends.org/f/viewtopic.php?f=16&t=44140

Please patch annd secure your XAMPP installation

http://www.apachefriends.org/en/xampp-windows.html#1221

As mentioned  at another place, XAMPP is not meant for production use
but only for developers in a development environment. XAMPP is
configured is to be as open as possible and to allow the web developer
anything he/she wants. For development environments this is great but
in a production environment it could be fatal.
_______________________________________________
OWASP-Malaysia mailing list
[email protected]
https://lists.owasp.org/mailman/listinfo/owasp-malaysia

OWASP Malaysia Wiki
http://www.owasp.my

OWASP Malaysia Facebook
http://www.facebook.com/OWASP.Malaysia

OWASP Malaysia Twitter #owaspmy
http://www.twitter.com/owaspmy

Reply via email to