[SECURITY] [DSA-1965-1] New phpldapadmin packages fix remote file inclusion

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1965 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 06, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1965-1] New phpldapadmin packages fix remote file inclusion

------------------------------------------------------------------------ Debian Security Advisory DSA-1965 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 06, 2010 http://www.debian.org/security/faq -...

DSA-1965-1 phpldapadmin - remote file inclusion

Bulletin has no description...

Fedora Core 11 FEDORA-2009-13598 (phpldapadmin)

The remote host is missing an update to phpldapadmin announced via advisory FEDORA-2009-13598. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Fedora Core 11 FEDORA-2009-13598 (phpldapadmin)

The remote host is missing an update to phpldapadmin announced via advisory FEDORA-2009-13598. OpenVAS Vulnerability Test $Id: fcore200913598.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13598 phpldapadmin Authors: Thomas Reinke Copyright:...

Directory traversal

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

DEBIAN-CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4427

CVE-2009-4427: In phpLDAPadmin, phpLDAPadmin 1.1.0.5 is vulnerable to remote local-file inclusion via cmd.php (parameter cmd) due to insufficient input sanitising, enabling arbitrary local file execution. Debian and related advisories (DSA-1965) fix this by upgrading phpldapadmin to a later packa...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4427: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

Fedora 11 : phpldapadmin-1.2.0.4-1.fc11 (2009-13598)

Upgrade to 1.2.0.4 A vulnerability has been discovered on phpLDAPadmin version 1.1.x, which can be exploited by malicious people to disclose sensitive information. See http://secunia.com/advisories/37848/ This update upgrades phpldapadmin to the latest version 1.2.0.4, which is not affected. Note...

[SECURITY] Fedora 11 Update: phpldapadmin-1.2.0.4-1.fc11

PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...

phpLDAPadmin Detection

The remote host is running phpLDAPadmin, an open source web-based LDAP client written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid43401; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

phpLDAPadmin cmd参数本地文件包含漏洞

BUGTRAQ ID: 37327 phpLDAPadmin是基于web的LDAP客户端，允许方便的管理LDAP服务器。 phpLDAPadmin的cmd.php页面用户通过URI所提交的参数： line 10 $www'cmd' = getrequest'cmd','REQUEST'; line 22-27 if defined'HOOKSDIR' && fileexistsHOOKSDIR.$www'cmd'.'.php' $file = HOOKSDIR.$www'cmd'.'.php'; elseif defined'HTDOCDIR' &&...

phpLDAPadmin cmd.php cmd Parameter Local File Inclusion

The version of phpLDAPadmin installed on the remote host fails to sanitize user-supplied input to the 'cmd' parameter when passed to the 'cmd.php' script before using it to include PHP code. Regardless of PHP's 'registerglobals' and 'magicquotesgpc' settings, an unauthenticated attacker may be ab...

phpldapadmin 'cmd.php' Local File Include Vulnerability

phpldapadmin is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. phpldapadmin 1.1.0.5 is vulnerable; other...