Skip to main content
CRITICAL

CVE-2019-8923

CVSS v3

9.8

CRITICAL

EPSS Score

11.2 %

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.

Technical details

Published
2019-05-14
Exploit-DB
EDB-46424

Frequently asked questions

What is CVE-2019-8923?

XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.

Is CVE-2019-8923 actively exploited?

Active exploitation of CVE-2019-8923 has not been confirmed. The EPSS score is 11.2%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2019-8923?

CVE-2019-8923 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2019-8923 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

No credit card required · 500 free checks/month · Free API key