Fluid Attacks Database

Description

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	ldap-account-manager	>=0 <3.6-2	3.6-2
debian 13	phpldapadmin	>=0 <1.2.2-3	1.2.2-3
debian 14	phpldapadmin	>=0 <1.2.2-3	1.2.2-3
debian 12	phpldapadmin	>=0 <1.2.2-3	1.2.2-3
debian 13	ldap-account-manager	>=0 <3.6-2	3.6-2
debian 14	ldap-account-manager	>=0 <3.6-2	3.6-2

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.