CVE-2018-20806

Phamm (PHP LDAP Virtual Hosting Manager) 0.6.8 is vulnerable to XSS on the login page via the /public/main.php action parameter. This is documented across multiple sources (e.g., CVE-2018-20806 in NVD/NIST and OSV, CNVD, UBUNTU CVE entries). The vulnerability affects Phamm 0.6.8 and allows inject...