phpldapadmin 漏洞

中危2024/01/15

PHP LDAP Admin < 1.2.5 - Cross-Site Scripting

PHP LDAP Admin is vulnerable to XSS.

phpldapadminPoC 已收录

CVSS—

中危CVE-2017-111072017/07/08

phpLDAPadmin <= 1.2.3 - Reflected XSS

phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter.

phpldapadminPoC 已收录

CVSS6.1

高危CVE-2011-40752011/11/02

CVE-2011-4075

The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.

phpldapadminRCE

CVSS7.5EPSS 83.2%

phpldapadmin

关联漏洞

PHP LDAP Admin < 1.2.5 - Cross-Site Scripting

phpLDAPadmin <= 1.2.3 - Reflected XSS

CVE-2011-4075