CVE-2005-2793

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the customwelcomepage parameter...

CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

DEBIAN-CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

DEBIAN-CVE-2005-2793

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the customwelcomepage parameter...

CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

CVE-2005-2793

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the customwelcomepage parameter...

CVE-2005-2793

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the customwelcomepage parameter...

CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

CVE-2005-2793

CVE-2005-2793 : phpLDAPadmin versions 0.9.6 and 0.9.7 contain a PHP remote file inclusion in welcome.php, exploitable via the custom_welcome_page parameter to execute arbitrary PHP code. The connected documents confirm the vulnerable component and the root cause (remote file inclusion) and vulner...

CVE-2005-2792

CVE-2005-2792 affects phpLDAPadmin 0.9.6 and 0.9.7, allowing remote attackers to read arbitrary files via a dot-dot in the custom_welcome_page parameter of welcome.php (directory traversal). Multiple connected records corroborate this vulnerability and classify it as a directory traversal issue i...

CVE-2005-2792: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

CVE-2005-2793: Improper Neutralization of Special Elements used in a Command

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the customwelcomepage parameter...

phpLDAPadmin.pl.txt

!/usr/bin/perl \ \ | / \ \ | // \ / | | | \ \ \ / \ / \ / \ | | \ // // | | \ | // / // | \ || /\ | / /| /\ / /|| / / / / / /// / Coded By Johnnie Walker Greets: sirh0t , Cute Eliisabeth And Tayphoon Suck My Dick: cobradriver , atmaca , kozan Red Dragon: Johhnie Walker . Nightmare . Erbil...

phpLDAPadmin 0.9.6 - 0.9.7/alpha5 (possibly prior versions) system disclosure,

phpLDAPadmin 0.9.6 - 0.9.7/alpha5 possibly prior versions system disclosure, remote code execution, cross site scripting software: author site: http://phpldapadmin.sourceforge.net/ description: phpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language...

phpLDAPadmin custom_welcome_page Parameter File Include Vulnerability

The remote host appears to be running phpLDAPadmin, a PHP-based LDAP browser. The version of phpLDAPadmin installed on the remote host fails to properly sanitize user-supplied input to the 'customwelcomepage' parameter of the 'welcome.php' script before using it to include PHP code. By leveraging...

phpLDAPadmin Anonymous Bind Security Bypass Vulnerability

The remote host is running phpLDAPadmin, a PHP-based LDAP browser. The version of phpLDAPadmin installed on the remote host may allow access to an LDAP server anonymously, even if anonymous binds have been disabled in the application's configuration. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

DEBIAN-CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...