CVE-2012-1115

Description

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.

References

https://security-tracker.debian.org/tracker/CVE-2012-1115

https://exchange.xforce.ibmcloud.com/vulnerabilities/74357

https://exchange.xforce.ibmcloud.com/vulnerabilities/73971

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1115

http://www.securityfocus.com/bid/52255

http://www.openwall.com/lists/oss-security/2012/03/12/10

http://www.openwall.com/lists/oss-security/2012/03/12/1

http://www.openwall.com/lists/oss-security/2012/03/05/24

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089313.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089297.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3