CVE-2020-35132

CVE-2020-35132 affects phpLDAPadmin prior to 1.2.6.2. The issue is an XSS that lets a user store malicious values, which may be executed by other users later via get_request in lib/function.php. Public details indicate the vulnerability resides in phpLDAPadmin’s web interface and is triggered whe...

CVE-2005-2792

CVE-2005-2792 affects phpLDAPadmin 0.9.6 and 0.9.7, allowing remote attackers to read arbitrary files via a dot-dot in the custom_welcome_page parameter of welcome.php (directory traversal). Multiple connected records corroborate this vulnerability and classify it as a directory traversal issue i...