CVE-2008-2398

CVE-2008-2398 affects AppServ Open Project 2.5.10 and earlier, with a cross-site scripting (XSS) vulnerability in index.php that allows injection of arbitrary script/HTML via the appservlang parameter. Root cause is input handling in index.php failing to neutralize user-supplied appservlang data....

CVE-2006-0125

Affected software: AppServ 2.4.5 (AppServ main.php). Vulnerability: appserv_root parameter in appserv/main.php can be exploited for a remote file inclusion (RFI). Root cause: lack of input sanitization for appserv_root leading to include of arbitrary files. Impact (as documented): unauthenticated...

CVE-2004-1532

CVE-2004-1532 affects AppServ 2.5.x and earlier, where a default username and password allow remote attackers to gain access. The connected documents corroborate that the issue centers on default credentials enabling remote login to the affected service (e.g., MySQL-related checks in scanning too...