phpLDAPadmin Cross Site Scripting and PHP Code Injection Vulnerabilities

Bugtraq ID: 50331
Class: Input Validation Error
CVE: CVE-2011-4075
CVE-2011-4074
Remote: Yes
Local: No
Published: Oct 23 2011 12:00AM
Updated: Nov 25 2011 05:06PM
Credit: EgiX and phpLDAPadmin
Vulnerable: Red Hat Fedora 16
Red Hat Fedora 15
Red Hat Fedora 14
phpldapadmin phpldapadmin 1.2
phpldapadmin phpldapadmin 1.2.1.1
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus