Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: phpLDAPadmin Clear all filters
TI-2024-08452 CVE-2024-9102 · GHSA-p8hv-f2qg-cxvv

phpLDAPadmin: Improper Neutralization of Formula Elements

Priority LOW 23

phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements th…

CVSS 4.0MEDIUM 5.0 Local Low privileges No interaction EPSS 0.00419 Published 2024-12-19 No fix listed CWE-1236
TI-2024-08451 CVE-2024-9101 · GHSA-6mpf-h5jc-fvrw

phpLDAPadmin: Reflected Cross-Site Scripting in entry_chooser.php

Priority LOW 14

A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via t…

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00495 Published 2024-12-19 No fix listed CWE-79