Read the docs

phpLDAPadmin

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

phpLDAPadmin records in CISA KEV

No phpLDAPadmin vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-08452 CVE-2024-9102 · GHSA-p8hv-f2qg-cxvv

phpLDAPadmin: Improper Neutralization of Formula Elements

Priority LOW 23

phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements th…

CVSS 4.0MEDIUM 5.0 Local Low privileges No interaction EPSS 0.00419 Published 2024-12-19 No fix listed CWE-1236
TI-2024-08451 CVE-2024-9101 · GHSA-6mpf-h5jc-fvrw

phpLDAPadmin: Reflected Cross-Site Scripting in entry_chooser.php

Priority LOW 14

A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via t…

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00495 Published 2024-12-19 No fix listed CWE-79
Open these records in search →