Cross-site scripting in phpLDAPadmin - CVE-2011-4074
Published: November 2, 2011 / Updated: February 16, 2023
Vulnerability identifier: #VU44551
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-4074
CWE-ID: CWE-79
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
Vulnerability allows a remote attacker to perform XSS attacks.
The vulnerability is caused by an input validation error in cmd.php in phpLDAPadmin 1.2.x before 1.2.2. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in victim's browser in security context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
Affected software
phpLDAPadmin
Fedora
phpldapadmin
Fedora
phpldapadmin
How to mitigate CVE-2011-4074
Install update from vendor's website.
phpLDAPadmin - update to 1.2.2
phpldapadmin - addressed in versions 1.0.2-1.el5, 1.2.1.1-2.20111006git.el6
phpldapadmin - addressed in versions 1.0.2-1.el5, 1.2.1.1-2.20111006git.el6
External References
- http://openwall.com/lists/oss-security/2011/10/24/9
- http://openwall.com/lists/oss-security/2011/10/25/2
- http://osvdb.org/76593
- http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin;a=blobdiff;f=htdocs/cmd.php;h=0ddf0044355abc94160be73122eb34f3e48ab2d9;hp=34f3848fe4a6d4c00c7c568afa81f59579f5d724;hb=64668e882b8866fae0fa1b25375d1a2f3b4672e2;hpb=caeba72171ade4f588fef1818aa4f6243a68b85e
- http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
- http://secunia.com/advisories/46551
- http://secunia.com/advisories/46672
- http://www.debian.org/security/2011/dsa-2333
- http://www.securityfocus.com/bid/50331