336 matches found
Debian DSA-1057-1 : phpldapadmin - missing input sanitising
Several cross-site scripting vulnerabilities have been discovered in phpLDAPadmin, a web-based interface for administering LDAP servers, that allows remote attackers to inject arbitrary web script or HTML. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
[SECURITY] [DSA 1057-1] New phpLDAPadmin packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 1057-1 [email protected] http://www.debian.org/security/ Martin Schulze May 15th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1057-1] New phpLDAPadmin packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 1057-1 [email protected] http://www.debian.org/security/ Martin Schulze May 15th, 2006 http://www.debian.org/security/faq -...
DSA-1057-1 phpldapadmin - missing input sanitising
Bulletin has no description...
FreeBSD : phpldapadmin -- XSS and Script Insertion vulnerabilities (6d78202e-e2f9-11da-8674-00123ffe8333)
Secunia reports : phpLDAPadmin have some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. 1 Some input isn't properly sanitised before being returned to the user. This can be exploited t...
CVE-2006-2016
Multiple cross-site scripting XSS vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dn parameter in a compareform.php, b copyform.php, c renameform.php, d templateengine.php, and e deleteform.php; 2 scope parameter in f...
CVE-2006-2016
Multiple cross-site scripting XSS vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dn parameter in a compareform.php, b copyform.php, c renameform.php, d templateengine.php, and e deleteform.php; 2 scope parameter in f...
DEBIAN-CVE-2006-2016
Multiple cross-site scripting XSS vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dn parameter in a compareform.php, b copyform.php, c renameform.php, d templateengine.php, and e deleteform.php; 2 scope parameter in f...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dn parameter in a compareform.php, b copyform.php, c renameform.php, d templateengine.php, and e deleteform.php; 2 scope parameter in f...
CVE-2006-2016
Multiple cross-site scripting XSS vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dn parameter in a compareform.php, b copyform.php, c renameform.php, d templateengine.php, and e deleteform.php; 2 scope parameter in f...
CVE-2006-2016
Multiple cross-site scripting XSS vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dn parameter in a compareform.php, b copyform.php, c renameform.php, d templateengine.php, and e deleteform.php; 2 scope parameter in f...
CVE-2006-2016
Multiple cross-site scripting XSS vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dn parameter in a compareform.php, b copyform.php, c renameform.php, d templateengine.php, and e deleteform.php; 2 scope parameter in f...
CVE-2006-2016
CVE-2006-2016 is tied to phpLDAPadmin and is confirmed by multiple sources as a set of cross-site scripting (XSS) vulnerabilities in versions up to 0.9.8 and earlier. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific user-controllable inputs: the dn pa...
phpLDAPadmin 0.9.8 - template_engine.php Cross-Site Scripting
phpLDAPadmin 0.9.8 - templateengine.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can...
phpLDAPadmin 0.9.8 - search.php Cross-Site Scripting
phpLDAPadmin 0.9.8 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit thes...
phpLDAPadmin 0.9.8 - 'compare_form.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary HTML and script code in...
phpLDAPadmin 0.9.8 - copy_form.php Cross-Site Scripting
phpLDAPadmin 0.9.8 - copyform.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...
phpLDAPadmin 0.9.8 - 'search.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary HTML and script code in...
phpLDAPadmin 0.9.8 - rename_form.php Cross-Site Scripting
phpLDAPadmin 0.9.8 - renameform.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...
phpLDAPadmin 0.9.8 - compare_form.php Cross-Site Scripting
phpLDAPadmin 0.9.8 - compareform.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...