5 matches found
CVE-2020-36966
CVE-2020-36966 affects Dolibarr 11.0.3: a persistent XSS in LDAP synchronization (/dolibarr/admin/ldap.php) allows injection via host, slave, and port parameters, enabling arbitrary JavaScript execution and potential cookie theft. Public sources describe the vulnerability; no patch details are pr...
CVE-2020-36966 Dolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site Scripting
Dolibarr 11.0.3 contains a persistent cross-site scripting vulnerability in LDAP synchronization settings that allows attackers to inject malicious scripts through multiple parameters. Attackers can exploit the host, slave, and port parameters in /dolibarr/admin/ldap.php to execute arbitrary...
EUVD-2006-6558
Malware in sbrugna...
EUVD-2011-4466
Malware in sbrugna...
yaplap <= 0.6.1b (ldap.php) Remote File Include Exploit
Exploit for unknown platform in category web applications ======================================================= yaplap zzer0c00l use LWP::UserAgent; email protected0; email protected1; email protected2; if$target!/http:/// || $shellsite!/http:/// || !$cmdv usg header; while print "Shell $";...