52 matches found
CVE-2012-1115
CVE-2012-1115 affects LDAP Account Manager (LAM) Pro 3.6, with a Cross-Site Scripting (XSS) vulnerability in the export, add_value_form, and dn parameters to cmd.php. All connected sources confirm the XSS issue in LAM Pro 3.6; no specific patch/version to remediate is provided in the supplied doc...
CVE-2012-1114
CVE-2012-1114: XSS vulnerability in LDAP Account Manager (LAM) Pro 3.6, triggered via the filter parameter to cmd.php in export/exporter_id and the filteruid parameter to list.php. Connected documents confirm the vulnerability details across multiple advisories; no exploits or mitigation steps ar...
CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
CVE-2013-4453
CVE-2013-4453 is an XSS vulnerability in LDAP Account Manager (LAM) affecting versions 4.3 and 4.2.1. The flaw resides in templates/login.php where the language parameter can be exploited to inject arbitrary web script or HTML. Public references cite remote execution of script via this parameter,...
CVE-2007-1840
lib/modules.inc in LDAP Account Manager LAM before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting XSS...
CVE-2007-1840
The CVE-2007-1840 issue affects ldap-account-manager (LAM) prior to 1.3.0, specifically the lib/modules.inc handling of LDAP data. The vulnerability arises from HTML special characters not being escaped, which can enable a cross-site scripting (XSS) type impact in the victim’s browser in the cont...
CVE-2006-7191
The CVE-2006-7191 vulnerability affects LDAP Account Manager (LAM) via lamdaemon.pl, where an untrusted PATH can let local users execute a malicious rm and gain privileges. Public advisories (DSA-1287-1 for Debian) confirm the issue and provide remediation by upgrading ldap-account-manager to a f...
CVE-2005-1379
The LAM runtime environment package lam-runtime-7.0.6-2mdk on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges...
CVE-2005-1379
The LAM runtime environment package lam-runtime-7.0.6-2mdk on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges...
CVE-2005-1379
CVE-2005-1379 affects the LAM runtime environment package lam-runtime-7.0.6-2mdk on Mandrake Linux, which installs the mpi user without a password, enabling local users to gain privileges. The connected documents provide a local privilege escalation path via an unprotected mpi account, but contai...