Phpldapadmin
Approved changes feed: RSS · Atom
cpe:2.3:a:phpldapadmin:phpldapadmin:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Phpldapadmin (83479417-a82f-572d-a519-77e2240efa1e) |
|---|---|
| Product | Phpldapadmin (14ce3ccf-b003-560b-a9f4-f356d800366b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/phpldapadmin |
purl2cpe | 2026-06-01 10:11:14.937445 |
pkg:deb/ubuntu/phpldapadmin |
purl2cpe | 2026-06-01 10:11:14.937448 |
pkg:github/leenooks/phpldapadmin |
purl2cpe | 2026-06-01 10:11:14.937451 |
pkg:rpm/fedora/phpldapadmin |
purl2cpe | 2026-06-01 10:11:14.937453 |
pkg:rpm/opensuse/phpldapadmin |
purl2cpe | 2026-06-01 10:11:14.937456 |
pkg:sourceforge/phpldapadmin |
purl2cpe | 2026-06-01 10:11:14.937459 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9102 |
vulnerable | 2026-06-08 07:00:26.658982 |
phpLDAPadmin: Improper Neutralization of Formula Elements
phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection. NOTE: This vulnerability will not be addressed, the maintainer's position is that it is not the intention of phpLDAPadmin to control what data Administrators can put in their LDAP database, nor filter it on export.
Published: 2024-12-19T13:41:24.263Z
Updated: 2025-04-16T11:41:48.766Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9101 |
vulnerable | 2026-06-08 07:00:26.658409 |
phpLDAPadmin: Reflected Cross-Site Scripting in entry_chooser.php
A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafely passed to the JavaScript 'eval' function. However, exploitation is limited to specific conditions where 'opener' is correctly set.
Published: 2024-12-19T13:41:06.610Z
Updated: 2024-12-20T20:20:24.165Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4082 |
vulnerable | 2026-06-08 04:59:29.131771 |
Details available
A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw to cause a denial of service via specially-crafted request.
Published: 2019-11-26T04:02:45.000Z
Updated: 2024-08-06T23:53:32.751Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.