CVE-2012-1114

Description

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.

References

https://security-tracker.debian.org/tracker/CVE-2012-1114

https://exchange.xforce.ibmcloud.com/vulnerabilities/73971

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1114

http://www.securityfocus.com/bid/52255

http://www.openwall.com/lists/oss-security/2012/03/12/10

http://www.openwall.com/lists/oss-security/2012/03/12/1

http://www.openwall.com/lists/oss-security/2012/03/05/24

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089313.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089297.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3