CVE-2020-36966 Dolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site Scripting

Dolibarr 11.0.3 contains a persistent cross-site scripting vulnerability in LDAP synchronization settings that allows attackers to inject malicious scripts through multiple parameters. Attackers can exploit the host, slave, and port parameters in /dolibarr/admin/ldap.php to execute arbitrary...

CVE-2020-36966

CVE-2020-36966 affects Dolibarr 11.0.3: a persistent XSS in LDAP synchronization (/dolibarr/admin/ldap.php) allows injection via host, slave, and port parameters, enabling arbitrary JavaScript execution and potential cookie theft. Public sources describe the vulnerability; no patch details are pr...

EUVD-2011-4466

Malware in sbrugna...

EUVD-2006-6558

Malware in sbrugna...

CVE-2011-4540: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AtMail Open aka AtMail Open-Source edition 1.04 allow remote attackers to inject arbitrary web script or HTML via the func parameter to 1 ldap.php or 2 search.php...

CVE-2007-3193: Undefined Security Weakness

lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORDLENGTHMINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldapbind to return true when used with certain LDAP implementations...

CVE-2006-6575: Undefined Security Weakness

PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project yaplap 0.6 and 0.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the LOGINstyle parameter...

yaplap <= 0.6.1b (ldap.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ======================================================= yaplap zzer0c00l use LWP::UserAgent; email protected0; email protected1; email protected2; if$target!/http:/// || $shellsite!/http:/// || !$cmdv usg header; while print "Shell $";...