Phpldapadmin

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. phpLDAPadmin <= 1.2.3 - Reflected XSSCVE-2017-11107Phpldapadmin Project · 2.1% likely

   CWE-79

2. The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) i…CVE-2011-4075Phpldapadmin Project · 52% likely

   CWE-94

3. Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page para…CVE-2005-2792Phpldapadmin Project · 12% likely

   CWE-22

4. Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter.CVE-2009-4427Phpldapadmin Project · 10.0% likely

   CWE-22

5. Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dn parameter in (a)…CVE-2006-2016Phpldapadmin Project · 8.2% likely

   CWE-79

6. Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.CVE-2011-4074Phpldapadmin Project · 5.4% likely

   CWE-79

7. Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base param…CVE-2012-0834Phpldapadmin Project · 4.8% likely

   CWE-79

8. PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter.CVE-2005-2793Phpldapadmin Project · 2.7% likely

   CWE-77

9. phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anony…CVE-2005-2654Phpldapadmin Project · 1.8% likely
10. phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a crafted username and password in the login panel.CVE-2018-12689Phpldapadmin Project · 1.7% likely
11. A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw…CVE-2011-4082phpldapadmin · 1.7% likely

    CWE-400

12. An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in…CVE-2020-35132Phpldapadmin Project · 1.2% likely

    CWE-79

13. phpLDAPadmin: Reflected Cross-Site Scripting in entry_chooser.phpCVE-2024-9101phpLDAPadmin · CVSS 2.1 · 0.5% likely

    CWE-79

14. phpLDAPadmin: Improper Neutralization of Formula ElementsCVE-2024-9102phpLDAPadmin · CVSS 5 · 0.4% likely

    CWE-1236

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.