Lucene search
Ubuntu.comUB:CVE-2011-4075HistoryNov 02, 2011 - 12:00 a.m.
CVE-2011-4075
2011-11-0200:00:00
ubuntu.com
ubuntu.com
18
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.364
Percentile
97.2%
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2
allows remote attackers to execute arbitrary PHP code via the orderby
parameter (aka sortby variable) in a query_engine action to cmd.php, as
exploited in the wild in October 2011.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | phpldapadmin | < 1.2.0.5-1ubuntu1.10.04.2 | UNKNOWN |
| ubuntu | 10.10 | noarch | phpldapadmin | < 1.2.0.5-1.1ubuntu1.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | phpldapadmin | < 1.2.0.5-2ubuntu1.11.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | phpldapadmin | < 1.2.0.5-2ubuntu1.11.10.1 | UNKNOWN |
Related
cvelist
cvelist
CVE-2011-4075
2011-11-02 17:00:00
metasploit
metasploit
phpLDAPadmin query_engine Remote PHP Code Injection
2011-10-24 23:22:32
openvas
openvas
phpLDAPadmin 'functions.php' Remote PHP Code Injection Vulnerability
2011-10-25 00:00:00
phpLDAPadmin 'functions.php' Remote PHP Code Injection Vulnerability
2011-10-25 00:00:00
Mandriva Update for phpldapadmin MDVSA-2011:163 (phpldapadmin)
2011-11-03 00:00:00
debiancve
debiancve
CVE-2011-4075
2011-11-02 17:55:01
exploitdb
exploitdb
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (Metasploit) (2)
2011-10-25 00:00:00
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1)
2011-10-23 00:00:00
cve
cve
CVE-2011-4075
2011-11-02 17:55:01
checkpoint_advisories
checkpoint_advisories
PHP phpLDAPadmin Remote Code Execution (CVE-2011-4075)
2013-10-13 00:00:00
nessus
nessus
phpLDAPadmin orderby Parameter Arbitrary PHP Code Execution
2011-11-03 00:00:00
Fedora 15 : phpldapadmin-1.2.1.1-2.20111006git.fc15 (2011-14993)
2011-11-26 00:00:00
Fedora 16 : phpldapadmin-1.2.1.1-2.20111006git.fc16 (2011-14924)
2011-11-26 00:00:00
prion
prion
Code injection
2011-11-02 17:55:00
dsquare
dsquare
phpLDAPadmin 1.2.1.1 RCE
2012-01-29 00:00:00
nvd
nvd
CVE-2011-4075
2011-11-02 17:55:01
osv
osv
phpldapadmin - several issues
2011-10-31 00:00:00
debian
debian
[SECURITY] [DSA 2333-1] phpldapadmin security update
2011-10-30 12:29:53
fedora
fedora
[SECURITY] Fedora 15 Update: phpldapadmin-1.2.1.1-2.20111006git.fc15
2011-11-25 02:05:42
[SECURITY] Fedora 16 Update: phpldapadmin-1.2.1.1-2.20111006git.fc16
2011-11-25 01:52:56
[SECURITY] Fedora 14 Update: phpldapadmin-1.2.1.1-2.20111006git.fc14
2011-11-25 01:56:24
securityvulns
securityvulns
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.364
Percentile
97.2%
Related for UB:CVE-2011-4075