p PatchFirst

CVE-2020-35132

CVE-2020-35132

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.

CVSS 5.4 · Medium · EPSS 1.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • phpldapadmin Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.6.3-0.3

    Update to 1.2.6.3-0.3

  • phpldapadmin Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.6.3-0.3

    Update to 1.2.6.3-0.3

  • phpldapadmin Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.2.6.3-0.3

    Update to 1.2.6.3-0.3

  • phpldapadmin Ubuntu:16.04:LTS

    Versions
    • 1.2.2-5.2
    • 1.2.2-5.2ubuntu1
    • 1.2.2-5.2ubuntu2
    • 1.2.2-5.2ubuntu2.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpldapadmin Ubuntu:18.04:LTS

    Versions
    • 1.2.2-6ubuntu1
    • 1.2.2-6ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpldapadmin Ubuntu:20.04:LTS

    Versions
    • 1.2.2-6.1ubuntu1
    • 1.2.2-6.2ubuntu1
    • 1.2.2-6.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpldapadmin Ubuntu:22.04:LTS

    Versions
    • 1.2.2-6.3
    • 1.2.6.3-0.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpldapadmin Ubuntu:24.04:LTS

    Versions
    • 1.2.6.3-0.3
    • 1.2.6.6-2
    • 1.2.6.7-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpldapadmin Ubuntu:25.10

    Versions
    • 1.2.6.7-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpldapadmin Ubuntu:26.10

    Versions
    • 1.2.6.7-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpldapadmin Ubuntu:26.04:LTS

    Versions
    • 1.2.6.7-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →