CVE-2013-4453

Опубликовано: 05 нояб. 2013

Источник: debian

Описание

Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
ldap-account-manager	fixed	4.4-1		package
ldap-account-manager	no-dsa		wheezy	package
ldap-account-manager	no-dsa		squeeze	package

Связанные уязвимости

CVE-2013-4453

ubuntu

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter.

CVE-2013-4453

nvd

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter.

GHSA-5g8x-p6v8-2gx5

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter.