| Vulnerability Name: | CVE-2012-1115 (CCN-74357) | ||||||||||||
| Assigned: | 2012-03-12 | ||||||||||||
| Published: | 2012-03-12 | ||||||||||||
| Updated: | 2019-12-09 | ||||||||||||
| Summary: | A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php. | ||||||||||||
| CVSS v3 Severity: | 6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
| ||||||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N) 4.1 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:U/RC:UR)
4.1 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:U/RC:UR)
| ||||||||||||
| Vulnerability Type: | CWE-79 | ||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2012-1115 Source: MISC Type: Third Party Advisory http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089297.html Source: MISC Type: Third Party Advisory http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089313.html Source: MISC Type: Third Party Advisory http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html Source: CCN Type: phpLDAPadmin Web Site Main Page - phpLDAPadmin Source: CCN Type: sourceforge: phpLDAPadmin phpLDAPadmin Source: CCN Type: SA48273 phpLDAPadmin "filter" and "attr" Cross-Site Scripting Vulnerabilities Source: MISC Type: Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2012/03/05/24 Source: MISC Type: Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2012/03/12/1 Source: MISC Type: Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2012/03/12/10 Source: MISC Type: Third Party Advisory, VDB Entry http://www.securityfocus.com/bid/52255 Source: MISC Type: Issue Tracking, Third Party Advisory https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1115 Source: MISC Type: Third Party Advisory, VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/73971 Source: MISC Type: Third Party Advisory, VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/74357 Source: XF Type: UNKNOWN phpldapadmin-attr-xss(74357) Source: MISC Type: Third Party Advisory https://security-tracker.debian.org/tracker/CVE-2012-1115 | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||
| Oval Definitions | |||||||||||||
| |||||||||||||
| BACK | |||||||||||||