CVE-2008-2398 Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter.
MediumCVSS 4.3
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| appserv open project appserv | <= 2.5.10 | No fix listed |
| appserv open project appserv | = 1.0.0 | No fix listed |
| appserv open project appserv | = 1.2.0 | No fix listed |
| appserv open project appserv | = 1.3.0 | No fix listed |
| appserv open project appserv | = 1.4.0 | No fix listed |
| appserv open project appserv | = 1.5.0 | No fix listed |
| appserv open project appserv | = 1.6.0 | No fix listed |
| appserv open project appserv | = 1.7.0 | No fix listed |
| appserv open project appserv | = 1.8.0 | No fix listed |
| appserv open project appserv | = 1.9.0 | No fix listed |
| appserv open project appserv | = 2.0.0 | No fix listed |
| appserv open project appserv | = 2.1.0 | No fix listed |
| appserv open project appserv | = 2.2.0 | No fix listed |
| appserv open project appserv | = 2.3.0 | No fix listed |
| appserv open project appserv | = 2.4 | No fix listed |
| appserv open project appserv | = 2.4.1 | No fix listed |
| appserv open project appserv | = 2.4.2 | No fix listed |
| appserv open project appserv | = 2.4.3 | No fix listed |
| appserv open project appserv | = 2.4.4 | No fix listed |
| appserv open project appserv | = 2.4.4a | No fix listed |
| appserv open project appserv | = 2.4.5 | No fix listed |
| appserv open project appserv | = 2.4.6 | No fix listed |
| appserv open project appserv | = 2.4.7 | No fix listed |
| appserv open project appserv | = 2.4.8 | No fix listed |
| appserv open project appserv | = 2.4.9 | No fix listed |
Show 11 more
| Product | Affected versions | Fixed in |
|---|---|---|
| appserv open project appserv | = 2.5 | No fix listed |
| appserv open project appserv | = 2.5.1 | No fix listed |
| appserv open project appserv | = 2.5.2 | No fix listed |
| appserv open project appserv | = 2.5.3 | No fix listed |
| appserv open project appserv | = 2.5.4 | No fix listed |
| appserv open project appserv | = 2.5.4a | No fix listed |
| appserv open project appserv | = 2.5.5 | No fix listed |
| appserv open project appserv | = 2.5.6 | No fix listed |
| appserv open project appserv | = 2.5.7 | No fix listed |
| appserv open project appserv | = 2.5.8 | No fix listed |
| appserv open project appserv | = 2.5.9 | No fix listed |
References
- 30333 third-party-advisory
- 3896 third-party-advisory
- 20080520 AppServ Open Project < = 2.5.10 Remote XSS Vulnerability mailing-list
- 29291 exploit vdb-entry
- appserv-index-xss(42546) vdb-entry