CVE ID:	CVE-2013-2586
Description:	XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross- site scripting (XSS) attacks via the WriteIntoLocalDisk method.
Test IDs:	1.3.6.1.4.1.25623.1.0.804774
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2586 BugTraq ID: 62665 http://www.securityfocus.com/bid/62665 Bugtraq: 20130926 XAMPP 1.8.1 Local Write Access Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2013-09/0131.html http://www.exploit-db.com/exploits/28654 http://packetstormsecurity.com/files/123407/XAMPP-1.8.1-Local-Write-Access.html http://osvdb.org/97780 XForce ISS Database: xampp-cve20122586-lang-security-bypass(87499) https://exchange.xforce.ibmcloud.com/vulnerabilities/87499