NuytsTech Security

CVE-2007-1840

by ·

lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).

Date published : 2007-04-02

http://www.securityfocus.com/bid/23190

http://lam.cvs.sourceforge.net/lam/lam/lib/modules.inc?r1=1.173&r2=1.174

Tags: