Back to search
CVE-2007-1840
Published: Apr 3, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://lam.cvs.sourceforge.net/lam/lam/lib/modules.inc?r1=1.173&r2=1.174
x_refsource_CONFIRM
DSA-1287
vendor-advisory
x_refsource_DEBIAN
ADV-2007-1149
vdb-entry
x_refsource_VUPEN
25157
third-party-advisory
x_refsource_SECUNIA
23190
vdb-entry
x_refsource_BID
lam-htmlchar-xss(33307)
vdb-entry
x_refsource_XF
http://lam.sourceforge.net/changelog/index.htm
x_refsource_CONFIRM
24687
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now