63 matches found
CVE-2012-1115
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...
CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
Cross site scripting
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...
CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
CVE-2012-1115
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...
CVE-2012-1115
CVE-2012-1115 affects LDAP Account Manager (LAM) Pro 3.6, with a Cross-Site Scripting (XSS) vulnerability in the export, add_value_form, and dn parameters to cmd.php. All connected sources confirm the XSS issue in LAM Pro 3.6; no specific patch/version to remediate is provided in the supplied doc...
CVE-2012-1115
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...
CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
CVE-2012-1114
CVE-2012-1114: XSS vulnerability in LDAP Account Manager (LAM) Pro 3.6, triggered via the filter parameter to cmd.php in export/exporter_id and the filteruid parameter to list.php. Connected documents confirm the vulnerability details across multiple advisories; no exploits or mitigation steps ar...
CVE-2012-1114: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
CVE-2012-1115: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...
PT-2019-6736
Name of the Vulnerable Software and Affected Versions LDAP Account Manager LAM Pro version 3.6 Description A Cross-Site Scripting XSS issue exists in the export, add value form, and dn parameters to "cmd.php" API endpoint. This allows for potential malicious script execution. Recommendations For...
PT-2019-6735
Name of the Vulnerable Software and Affected Versions LDAP Account Manager LAM Pro version 3.6 Description A Cross-Site Scripting XSS issue exists in the filter parameter to "cmd.php" in an export and exporter id action, and the filteruid parameter to "list.php". Recommendations For LDAP Account...
CVE-2013-4453
CVE-2013-4453 is an XSS vulnerability in LDAP Account Manager (LAM) affecting versions 4.3 and 4.2.1. The flaw resides in templates/login.php where the language parameter can be exploited to inject arbitrary web script or HTML. Public references cite remote execution of script via this parameter,...
CVE-2007-1840
The CVE-2007-1840 issue affects ldap-account-manager (LAM) prior to 1.3.0, specifically the lib/modules.inc handling of LDAP data. The vulnerability arises from HTML special characters not being escaped, which can enable a cross-site scripting (XSS) type impact in the victim’s browser in the cont...
CVE-2007-1840
lib/modules.inc in LDAP Account Manager LAM before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting XSS...
CVE-2006-7191
The CVE-2006-7191 vulnerability affects LDAP Account Manager (LAM) via lamdaemon.pl, where an untrusted PATH can let local users execute a malicious rm and gain privileges. Public advisories (DSA-1287-1 for Debian) confirm the issue and provide remediation by upgrading ldap-account-manager to a f...