Cross-Site Scripting (XSS)

phpLDAPadmin is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the form, element, rdn, or container parameter in htdocs/entrychooser.php...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

CVE-2017-11107

CVE-2017-11107 affects phpLDAPadmin up to version 1.2.3, with a cross-site scripting vulnerability in htdocs/entry_chooser.php via form fields, the rdn, or container parameters. The issue stems from insufficient input sanitization in that component, enabling injected HTML/JavaScript in a user’s c...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...

CVE-2017-11107

phpLDAPadmin through 1.2.3 has XSS in htdocs/entrychooser.php via the form, element, rdn, or container parameter...