phpldapadmin project phpldapadmin 1.1.0.5 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter.

Phpldapadmin Project Phpldapadmin 1.1.0.5

1 EDB exploit

Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x prior to 1.2.2 allows remote malicious users to inject arbitrary web script or HTML via an _debug command.

Phpldapadmin Project Phpldapadmin 1.2.0 Phpldapadmin Project Phpldapadmin 1.2.0.1 Phpldapadmin Project Phpldapadmin 1.2.0.2 Phpldapadmin Project Phpldapadmin 1.2.0.3 Phpldapadmin Project Phpldapadmin 1.2.0.4 Phpldapadmin Project Phpldapadmin 1.2.0.5 Phpldapadmin Project Phpldapadmin 1.2.1 Phpldapadmin Project Phpldapadmin 1.2.1.1

1 EDB exploit

The masort function in lib/functions.php in phpLDAPadmin 1.2.x prior to 1.2.2 allows remote malicious users to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.

Phpldapadmin Project Phpldapadmin 1.2.0 Phpldapadmin Project Phpldapadmin 1.2.0.1 Phpldapadmin Project Phpldapadmin 1.2.0.2 Phpldapadmin Project Phpldapadmin 1.2.0.3 Phpldapadmin Project Phpldapadmin 1.2.0.4 Phpldapadmin Project Phpldapadmin 1.2.0.5 Phpldapadmin Project Phpldapadmin 1.2.1 Phpldapadmin Project Phpldapadmin 1.2.1.1

2 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook