CVE-2018-12689
CVE-2018-12689
This page contains facts from public vulnerability sources. Check the original advisory before updating.
phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a crafted username and password in the login panel.
CVSS 9.8 · Critical · EPSS 1.8%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phpldapadmin Debian:12
- Versions
- 1.2.6.3-0.3
- 1.2.6.3-0.3+deb12u1
- 1.2.6.6-1
- 1.2.6.6-2
- 1.2.6.7-1
- 1.2.6.7-2
- 1.2.6.7-2~bpo12+1
- 1.2.6.7-3
- 1.2.6.7-3~bpo12+1
- 1.2.6.7-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Debian:13
- Versions
- 1.2.6.7-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Debian:14
- Versions
- 1.2.6.7-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Ubuntu:16.04:LTS
- Versions
- 1.2.2-5.2
- 1.2.2-5.2ubuntu1
- 1.2.2-5.2ubuntu2
- 1.2.2-5.2ubuntu2.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Ubuntu:18.04:LTS
- Versions
- 1.2.2-6ubuntu1
- 1.2.2-6ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Ubuntu:20.04:LTS
- Versions
- 1.2.2-6.1ubuntu1
- 1.2.2-6.2ubuntu1
- 1.2.2-6.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Ubuntu:22.04:LTS
- Versions
- 1.2.2-6.3
- 1.2.6.3-0.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Ubuntu:24.04:LTS
- Versions
- 1.2.6.3-0.3
- 1.2.6.6-2
- 1.2.6.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Ubuntu:25.10
- Versions
- 1.2.6.7-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Ubuntu:26.10
- Versions
- 1.2.6.7-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
phpldapadmin Ubuntu:26.04:LTS
- Versions
- 1.2.6.7-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published