Appserv Open Project Appserv — known CVE vulnerabilities

Every CVE whose affected-product data names Appserv Open Project Appserv, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2004-1532 — CVSS 7.5 (high): AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.
• CVE-2006-0125 — CVSS 5.0 (medium): Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root…
• CVE-2008-2398 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject…