İçeriğe atla
Noroxi

phpldapadmin project kayıtları

phpldapadmin project üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %8,3
Pre-auth RCE
3
Düzeltme kaydı olan
%91,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

12 kayıt
  • CVE-2011-4075
    46Planlayın

    The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the or

    YüksekCVSS 7,5SilahlaştırılmışEPSS %52

    phpldapadmin project · phpldapadmin2 Kas 2011

  • CVE-2018-12689
    40Planlayın

    phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a crafted username and pa

    KritikCVSS 9,8İstismar yokEPSS %2

    phpldapadmin project · phpldapadmin22 Haz 2018

  • CVE-2009-4427
    33İzleyin

    Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    phpldapadmin project · phpldapadmin28 Ara 2009

  • CVE-2005-2793
    31İzleyin

    PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code

    YüksekCVSS 7,5İstismar yokEPSS %3

    phpldapadmin project · phpldapadmin2 Eyl 2005

  • CVE-2005-2654
    31İzleyin

    phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an H

    YüksekCVSS 7,5İstismar yokEPSS %2

    phpldapadmin project · phpldapadmin30 Ağu 2005

  • CVE-2011-4082
    31İzleyin

    A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header

    YüksekCVSS 7,5İstismar yokEPSS %2

    phpldapadmin project · phpldapadmin26 Kas 2019

  • CVE-2017-11107
    25İzleyin

    phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    phpldapadmin project · phpldapadmin8 Tem 2017

  • CVE-2005-2792
    24İzleyin

    Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    phpldapadmin project · phpldapadmin2 Eyl 2005

  • CVE-2020-35132
    21İzleyin

    An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other us

    OrtaCVSS 5,4İstismar yokEPSS %1

    phpldapadmin project · phpldapadmin11 Ara 2020

  • CVE-2011-4074
    19İzleyin

    Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web scrip

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    phpldapadmin project · phpldapadmin2 Kas 2011

  • CVE-2012-0834
    18İzleyin

    Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrar

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    phpldapadmin project · phpldapadmin10 Şub 2012

  • CVE-2006-2016
    12İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script

    DüşükCVSS 2,6Kavram kanıtıEPSS %8

    phpldapadmin project · phpldapadmin25 Nis 2006