Published: 25/04/2006 Updated: 16/11/2020

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

VMScore: 285

Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) dn parameter in (a) compare_form.php, (b) copy_form.php, (c) rename_form.php, (d) template_engine.php, and (e) delete_form.php; (2) scope parameter in (f) search.php; and (3) Container DN, (4) Machine Name, and (5) UID Number fields in (g) template_engine.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpldapadmin project phpldapadmin
debian debian linux 3.0
debian debian linux 3.1

Debian Bug report logs - #365313 CVE-2006-2016: multiple xss vulnerabilities in phpldapadmin Package: phpldapadmin; Maintainer for phpldapadmin is Fabio Tranchitella <kobold@debianorg>; Source for phpldapadmin is src:phpldapadmin (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Sat, 29 Apr 20 ...

Several cross-site scripting vulnerabilities have been discovered in phpLDAPadmin, a web based interface for administering LDAP servers, that allows remote attackers to inject arbitrary web script or HTML The old stable distribution (woody) does not contain phpldapadmin packages For the stable distribution (sarge) these problems have been fixed i ...

source: wwwsecurityfocuscom/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of ...

source: wwwsecurityfocuscom/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the conte ...

source: wwwsecurityfocuscom/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context ...

source: wwwsecurityfocuscom/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of th ...

source: wwwsecurityfocuscom/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the ...

CWE-79 http://www.securityfocus.com/bid/17643 http://www.osvdb.org/24788 http://www.osvdb.org/24789 http://www.osvdb.org/24790 http://www.osvdb.org/24792 http://www.osvdb.org/24793 http://www.osvdb.org/24794 http://secunia.com/advisories/19747 http://www.debian.org/security/2006/dsa-1057 http://secunia.com/advisories/20124 http://pridels0.blogspot.com/2006/04/phpldapadmin-multiple-vuln.html http://www.vupen.com/english/advisories/2006/1450 https://exchange.xforce.ibmcloud.com/vulnerabilities/25959 https://exchange.xforce.ibmcloud.com/vulnerabilities/25958 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365313 https://nvd.nist.gov https://www.exploit-db.com/exploits/27719/https://www.debian.org/security/./dsa-1057

CVE-2006-2016

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect