CVE-2020-35132

CVE-2020-35132 affects phpLDAPadmin prior to 1.2.6.2. The issue is an XSS that lets a user store malicious values, which may be executed by other users later via get_request in lib/function.php. Public details indicate the vulnerability resides in phpLDAPadmin’s web interface and is triggered whe...

CVE-2011-4082

CVE-2011-4082 affects phpLDAPadmin prior to 0.9.8. The issue is a local file inclusion flaw introduced by how the Accept-Language HTTP header is processed, allowing a remote attacker to cause a denial of service via a specially crafted request. Exploitation is described as network-based, with imp...

CVE-2005-2654

CVE-2005-2654 affects phpldapadmin prior to 0.9.6c, where an HTTP request to login.php with the anonymous_bind parameter can bypass disable_anon_bind and grant anonymous access to the LDAP server. Connected sources corroborate this flaw and link to affected releases and upstream advisories. Gento...