336 matches found
CVE-2012-0834
Cross-site scripting XSS vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a queryengine action to cmd.php...
Debian Security Advisory DSA 2333-1 (phpldapadmin)
The remote host is missing an update to phpldapadmin announced via advisory DSA 2333-1. OpenVAS Vulnerability Test $Id: deb23331.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2333-1 phpldapadmin Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft In...
Debian: Security Advisory (DSA-2333-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2012-2895 · Phpldapadmin · Phpldapadmin
Name of the Vulnerable Software and Affected Versions: phpLDAPadmin versions 1.2.2 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query engine...
phpLDAPadmin 'server_id' Parameter Cross Site Scripting Vulnerabilities
phpLDAPadmin is prone to cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker t...
phpLDAPadmin < 1.2.3 XSS Vulnerability - Active Check
phpLDAPadmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
phpLDAPadmin 'server_id' Parameter Multiple XSS Vulnerabilities - Active Check
phpLDAPadmin is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
phpLDAPadmin 'base' Parameter XSS Vulnerability
phpLDAPadmin is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
phpldapadmin 1.2.2 Cross Site Scripting
Attach some PoC analysis related to a XSS vulnerability to phpldapadmin. I previously coordinate with the Cert-US in order they contact with Sourceforge and Debian, but receive they was unable to put in contact with them. The first discover was on January 10 for 1.1.6 version, where after noticed...
phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability
This host is running phpLDAPadmin and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbphpldapadminbaseparamxssvuln.nasl 5792 2017-03-30 13:18:14Z cfi $ phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2012...
phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability
phpLDAPadmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...
phpLDAPadmin 1.2.2 - base Cross-Site Scripting
phpLDAPadmin 1.2.2 - base Cross-Site Scripting source: https://www.securityfocus.com/bid/51793/info phpLDAPadmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
phpLDAPadmin 1.2.0.5-2 - server_id Cross-Site Scripting
phpLDAPadmin 1.2.0.5-2 - serverid Cross-Site Scripting source: https://www.securityfocus.com/bid/51794/info phpLDAPadmin is prone to cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script co...
phpLDAPadmin 1.2.2 - 'base' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51793/info phpLDAPadmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...
phpLDAPadmin 1.2.0.5-2 - 'server_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51794/info phpLDAPadmin is prone to cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the contex...
phpLDAPadmin 1.2.1.1 RCE
Remote command execution vulnerability in phpLDAPadmin queryengine Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Fedora 16 : phpldapadmin-1.2.1.1-2.20111006git.fc16 (2011-14924)
Update to the latest upstream development code to fix CVE-2011-4074 and CVE-2011-4075 XSS and code injection vulnerabilities in versions = 1.2.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 15 : phpldapadmin-1.2.1.1-2.20111006git.fc15 (2011-14993)
Update to the latest upstream development code to fix CVE-2011-4074 and CVE-2011-4075 XSS and code injection vulnerabilities in versions = 1.2.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 14 : phpldapadmin-1.2.1.1-2.20111006git.fc14 (2011-14986)
Update to the latest upstream development code to fix CVE-2011-4074 and CVE-2011-4075 XSS and code injection vulnerabilities in versions = 1.2.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
[SECURITY] Fedora 15 Update: phpldapadmin-1.2.1.1-2.20111006git.fc15
PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...