Skip to content
OpenAdvisories

Vendor

phpLDAPadmin

3 known vulnerabilities.

Products

phpLDAPadmin 3
All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.0
    CVE-2024-9102

    phpLDAPadmin: Improper Neutralization of Formula Elements

    phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command wh…

    phpLDAPadmin phpLDAPadmin phpldapadmin phpldapadmin Debian Ubuntu
  • Low 2.1
    CVE-2024-9101

    phpLDAPadmin: Reflected Cross-Site Scripting in entry_chooser.php

    A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafe…

    phpLDAPadmin phpLDAPadmin phpldapadmin phpldapadmin Debian Ubuntu
  • Unscored —
    CVE-2011-4082

    A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-…

    phpLDAPadmin phpLDAPadmin phpldapadmin Debian