High severity8.8NVD Advisory· Published Apr 2, 2020· Updated Jun 17, 2026

CVE-2020-11107

Description

An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apachefriends/Xampp
cpe:2.3:a:apachefriends:xampp:*:*:*:*:*:*:*:*
Range: <7.2.29
XAMPP/XAMPPdescription
Xampp/XAMPPllm-fuzzy
Range: <7.2.29, <7.3.16, <7.4.4

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/164292/XAMPP-7.4.3-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
www.apachefriends.org/blog/new_xampp_20200401.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.018
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000