← Vulnerability feed

Vulnerability record · CVE-2006-0125 · published 9 January 2006

CVE-2006-0125: Appserv open project appserv vulnerability

AAppserv Open Project · Appserv

Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough detail from these third party sources to know whether this is directory traversal, remote file include, or another issue.

5.0 CVSS 2.0 Medium EPSS 6.3% · top 6.7%
5.0CVSS 2.0 base score
6.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough detail from these third party sources to know whether this is directory traversal, remote file include, or another issue.

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/18163 Vendor Advisory
http://www.osvdb.org/22228
http://www.securityfocus.com/bid/16166
http://www.vupen.com/english/advisories/2006/0053
http://secunia.com/advisories/18163 Vendor Advisory
http://www.osvdb.org/22228
http://www.securityfocus.com/bid/16166
http://www.vupen.com/english/advisories/2006/0053

Track CVE-2006-0125 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-1532Appserv open project appserv vulnerabilityAppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.EPSS 1.5%4.3CVE-2008-2398Appserv open project appserv cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web scri…EPSS 6.2%

Source: NIST National Vulnerability Database (record CVE-2006-0125), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.