Vulnerability in Appserv Open Project
CVE-2006-0125
Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough detail from these third party sources to know whether this is directory traversal, remote file include, or another issue.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.063 (93.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 93.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.063 · newest: 0.063 · change: 0.000
Affected products
- Appserv Open Project — versions 2.4.5
References
- secunia.com/advisories/18163 (Vendor Advisory, third-party-advisory)
- www.vupen.com/english/advisories/2006/0053 (vdb-entry)
- www.securityfocus.com/bid/16166 (vdb-entry)
- www.osvdb.org/22228 (vdb-entry)