appserv open project appserv vulnerabilities

Latest appserv open project appserv CVEs

Newest publication first

1. CVE-2008-2398 Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter.

   Published 2008-05-21

   Medium·CVSS 4.3 EPSS 6.2%

   Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter.

2. CVE-2006-0125 Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter. NOTE: the provenance of this information is unknown; t...

   Published 2006-01-09

   Medium·CVSS 5.0 EPSS 6.3%

   Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough...

3. CVE-2004-1532 AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.

   Published 2005-02-19

   High·CVSS 7.5 EPSS 1.5%

   AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.