Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2007-1840

lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).

PublishedApr 03, 2007, 00:19

Published Bycve@mitre.org

Affected Versions

No affected versions found.

References

http://lam.cvs.sourceforge.net/lam/lam/lib/modules.inc?r1=1.173&r2=1.174
http://lam.sourceforge.net/changelog/index.htm
http://secunia.com/advisories/24687
http://secunia.com/advisories/25157
http://www.securityfocus.com/bid/23190
http://www.us.debian.org/security/2007/dsa-1287
http://www.vupen.com/english/advisories/2007/1149
https://exchange.xforce.ibmcloud.com/vulnerabilities/33307

Weakness Type

NVD-CWE-Other

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)