tocsin

Debian/phpldapadmin: unknown

The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine acti

Action: Upgrade phpldapadmin to 1.2.0.5-2.1 or later.

Affected

introducedfixedlast affected
01.2.0.5-2.1-

Fixed versions

1.2.0.5-2.1

Sources

published · modified · JSON