Vulnerabilities

TI-2008-02298 CVE-2008-2398 · GHSA-vx7q-r8hv-x3vh

Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and…

LOW 29

Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06232 Published 2008-05-21 No fix listed CWE-79

TI-2006-00118 CVE-2006-0125 · GHSA-xc9w-c2g3-64r6

Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to…

LOW 32

Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06278 Published 2006-01-09 No fix listed

TI-2004-01408 CVE-2004-1532 · GHSA-f2vr-g483-gx39

AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.

LOW 36

AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01532 Published 2005-02-19 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and…

Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to…

AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.