GCVE - cpe:2.3:a:phpldapadmin_project:phpldapadmin:1.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpldapadmin_project:phpldapadmin:1.2.1:*:*:*:*:*:*:*

part: a version: 1.2.1 update: *

Vendor	Phpldapadmin Project (`8ddf41c3-2b83-5f83-9c74-33dff9f8d9ec`)
Product	Phpldapadmin (`a72b8b55-b56f-5a8b-8cf8-0a68d841898b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:bitbucket/stangenberg/docker-phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325723
`pkg:deb/debian/phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325724
`pkg:deb/ubuntu/phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325726
`pkg:docker/osixia/phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325727
`pkg:github/leenooks/phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325728
`pkg:github/osixia/docker-phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325730
`pkg:rpm/fedora/phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325731
`pkg:rpm/opensuse/phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325732
`pkg:sourceforge/phpldapadmin`	purl2cpe	2026-06-01 10:17:39.325734

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4075`	vulnerable	2026-06-08 04:59:28.968916	Details available The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011. Published: 2011-11-02T17:00:00.000Z Updated: 2024-08-06T23:53:32.825Z Open on db.gcve.eu Reference links http://sourceforge.net/tracker/index.php?func=detail&aid=3417184&group_id=61828&atid=498546 http://osvdb.org/76594 http://www.securityfocus.com/bid/50331 http://openwall.com/lists/oss-security/2011/10/25/2 http://www.exploit-db.com/exploits/18021/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4074`	vulnerable	2026-06-08 04:59:28.967786	Details available Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command. Published: 2011-11-02T17:00:00.000Z Updated: 2024-08-06T23:53:32.686Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/50331 http://openwall.com/lists/oss-security/2011/10/25/2 http://secunia.com/advisories/46672 http://secunia.com/advisories/46551 http://openwall.com/lists/oss-security/2011/10/24/9	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.