Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2009-4427
Disclosure Date: December 28, 2009 (last updated October 04, 2023)
Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter.
0
Attacker Value
Unknown
CVE-2006-2016
Disclosure Date: April 25, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dn parameter in (a) compare_form.php, (b) copy_form.php, (c) rename_form.php, (d) template_engine.php, and (e) delete_form.php; (2) scope parameter in (f) search.php; and (3) Container DN, (4) Machine Name, and (5) UID Number fields in (g) template_engine.php.
0
Attacker Value
Unknown
CVE-2005-2793
Disclosure Date: September 02, 2005 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter.
0
Attacker Value
Unknown
CVE-2005-2792
Disclosure Date: September 02, 2005 (last updated February 22, 2025)
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.
0
Attacker Value
Unknown
CVE-2005-2654
Disclosure Date: August 30, 2005 (last updated October 04, 2023)
phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.
0
