CVE-2008-6499 Information

Description

security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array which allows remote attackers to spoof critical variables as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1.

Reference

https://exchange.xforce.ibmcloud.com/vulnerabilities/47202 https://www.exploit-db.com/exploits/7384