CVE-2008-2398

The AppServ Open Project (version 2.5.10 and earlier ) is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the index.php file. The root cause is the improper neutralization of user-supplied input via the appservlang parameter, which allows remote attackers to inject arbitrary web s...

CVE-2006-0125

Affected software: AppServ 2.4.5 (AppServ main.php). Vulnerability: appserv_root parameter in appserv/main.php can be exploited for a remote file inclusion (RFI). Root cause: lack of input sanitization for appserv_root leading to include of arbitrary files. Impact (as documented): unauthenticated...

CVE-2004-1532

CVE-2004-1532 affects AppServ 2.5.x and earlier, where a default username and password allow remote attackers to gain access. The connected documents corroborate that the issue centers on default credentials enabling remote login to the affected service (e.g., MySQL-related checks in scanning too...