45 matches found
appservopen-xss.txt
========================================================== AppServ Open Project XSS =Example= Alert: - http://target/index.php?appservlang=" - http://target/index.php?appservlang=" Open Window - http://target/index.php?appservlang="window.open/phpinfo.php/ - http://target/index.php?appservlang="...
AppServ Open Project 2.5.10 - appservlang Cross-Site Scripting
AppServ Open Project 2.5.10 - appservlang Cross-Site Scripting source: https://www.securityfocus.com/bid/29291/info AppServ Open Project is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
AppServ Open Project < = 2.5.10 Remote XSS Vulnerability
========================================================== AppServ Open Project = 2.5.10 Remote XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 19 May 2008 SITE : www.citec.us APPLICATION : AppServ Open Project VERSION : = 2.5.10 VENDOR...
AppServ Open Project 2.5.10 - 'appservlang' Cross-Site Scripting
source: https://www.securityfocus.com/bid/29291/info AppServ Open Project is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
AppServ appserv/main.php appserv_root Parameter Remote File Inclusion
The remote host appears to be running AppServ, a compilation of Apache, PHP, MySQL, and phpMyAdmin for Windows and Linux. The version of AppServ installed on the remote host fails to sanitize user-supplied input to the 'appservroot' parameter of the 'appserv/main.php' script before using it in a...
Directory traversal
Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appservroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough detail from these...
CVE-2006-0125
Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appservroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough detail from these...
CVE-2006-0125
Affected software: AppServ 2.4.5 (AppServ main.php). Vulnerability: appserv_root parameter in appserv/main.php can be exploited for a remote file inclusion (RFI). Root cause: lack of input sanitization for appserv_root leading to include of arbitrary files. Impact (as documented): unauthenticated...
CVE-2006-0125
Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appservroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough detail from these...
AppServ Open Project 2.4.5 - Remote File Inclusion
AppServ Open Project 2.4.5 - Remote File Inclusion source: https://www.securityfocus.com/bid/16166/info AppServ Open Project is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...
CVE-2006-0125: Undefined Security Weakness
Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appservroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough detail from these...
AppServ Open Project 2.4.5 - Remote File Inclusion
source: https://www.securityfocus.com/bid/16166/info AppServ Open Project is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an...
Remote file include in appserv 2.4.5 (possible in previous versions)
====================================================================== Remote file include in appserv 2.4.5 possible in previous versions ====================================================================== What is Appserv AppServ is the Apache/PHP/MySQL open source software installer packages...
CVE-2005-4296
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request...
CVE-2005-4296
Technical details about CVE-2005-4296 are not provided in the connected documents or the initial description. Public information is limited to a denial‑of‑service via large HTTP requests for AppServ Open Project 2.5.3. Monitor for updates.
CVE-2005-4296
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request...
CVE-2005-4296: Undefined Security Weakness
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request...
AppServ Open Project 2.5.3 - Remote Denial of Service
AppServ Open Project 2.5.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/15851/info AppServ Open Project is reportedly affected by a remote denial of service vulnerability. AppServ 2.5.3 running on Microsoft Windows platforms was reported to be vulnerable. Other versions ma...
AppServ Open Project 2.5.3 - Remote Denial of Service
source: https://www.securityfocus.com/bid/15851/info AppServ Open Project is reportedly affected by a remote denial of service vulnerability. AppServ 2.5.3 running on Microsoft Windows platforms was reported to be vulnerable. Other versions may be affected as well. Xploit PoC AppServ 2.5.3 "Win32...