phpLDAPadmin <= 1.2.3 - Reflected XSS Detection

phpLDAPadmin = 1.2.3 contains a reflected cross-site scripting caused by unsanitized input in htdocs/entrychooser.php via the form, element, rdn, or container parameter, letting attackers execute malicious scripts in victim browsers, exploit requires sending crafted input. !/usr/bin/env python3 -...

Cross-Site Scripting (XSS)

phpLDAPadmin is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the form, element, rdn, or container parameter in htdocs/entrychooser.php...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

ALPINE-CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

CVE-2017-11107

CVE-2017-11107 affects phpLDAPadmin up to version 1.2.3, with a cross-site scripting vulnerability in htdocs/entry_chooser.php via form fields, the rdn, or container parameters. The issue stems from insufficient input sanitization in that component, enabling injected HTML/JavaScript in a user’s c...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

CVE-2017-11107: Improper Neutralization of Input During Web Page Generation

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...