AppServ Open Project 2.5.10 and earlier XSS

Description

AppServ is an open-source software installer package for Windows, and it includes Apache Web Server Version 2.4.25, PHP Script Language Version 5.6.30 & 7.1.1., MySQL Database Version 5.7.17.

AppServ Open Project 2.5.10 is vulnerable to Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary javascript code or HTML via the appservlang parameter.

Recommendation

• Update AppServ Open Project to the latest version.

Written by

Febna V M

Cyber Security Engineer