CVE-2012-0834

MEDIUM 4.3CVE-2012-0834 · Published 11/02/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
phpldapadmin phpldapadmin_project	`≤ 1.2.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query_engine action to cmd.php.

References

openwall.com/lists/oss-security/2012/02/02/9 · Mailing List
openwall.com/lists/oss-security/2012/02/03/3 · Mailing List
phpldapadmin.git.sourceforge.net/git/gitweb.cgi
secunia.com/advisories/47852 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
sourceforge.net/tracker/index.php · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free