Solution
Please Install the Updated Packages.
Insight
A vulnerability has been found and corrected in phpldapadmin:
Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query_engine action to cmd.php (CVE-2012-0834).
The updated packages have been patched to correct this issue.
Affected
phpldapadmin on Mandriva Enterprise Server 5,
Mandriva Enterprise Server 5/X86_64
Severity
Classification
-
CVE CVE-2012-0834 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities