Debian Ldap-Account-Manager vulnerabilities

CVE-2026-27894 [HIGH] CVE-2026-27894: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, gr... LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with GHSA-88hf-2cjm-m9g8 this allows to execute arbitrary code

CVE-2026-27895 [MEDIUM] CVE-2026-27895: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, gr... LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, the PDF export component does not correctly validate uploaded file extensions. This way any file type (including .php files) can be uploaded. With GHSA-w7xq-vjr3-p9cf, an attacker can achieve remote co

CVE-2025-58174 [MEDIUM] CVE-2025-58174: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LD... LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script (for example a script element). An authenticated user with permission to create or edit a

CVE-2024-23333 [HIGH] CVE-2024-23333: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LD... LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify arbitrary paths for log files. Prior to version 8.7, an attacker could exploit this by creating a PHP file and cause LAM to log some PHP code to this file. When the file is then accessed via web the code would be execut

CVE-2024-52792 [HIGH] CVE-2024-52792: ldap-account-manager - LDAP Account Manager (LAM) is a php webfrontend for managing entries (e.g. users... LDAP Account Manager (LAM) is a php webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In affected versions LAM does not properly sanitize configuration values, that are set via `mainmanage.php` and `confmain.php`. This allows setting arbitrary config values and thus effectively bypassing `mitigation` of CV

CVE-2022-24851 [HIGH] CVE-2022-24851: ldap-account-manager - LDAP Account Manager (LAM) is an open source web frontend for managing entries s... LDAP Account Manager (LAM) is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an edit profile functionality, the parameters on this page are not properly sanitized and hence leads to stored XSS attacks. An authenticated user can store XSS payloads in the profiles, which gets triggered when any ot

CVE-2022-31087 [HIGH] CVE-2022-31087: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, gr... LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the tmp directory, which is accessible by /lam/tmp/, allows interpretation of .php (and .php5/.php4/.phpt/etc) files. An attacker capable of writing files under www-data privileges can write a web-she

CVE-2022-31084 [HIGH] CVE-2022-31084: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, gr... LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 There are cases where LAM instantiates objects from arbitrary classes. An attacker can inject the first constructor argument. This can lead to code execution if non-LAM classes are instantiated that e

CVE-2022-31086 [HIGH] CVE-2022-31086: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, gr... LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for re

CVE-2022-31088 [MEDIUM] CVE-2022-31088: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, gr... LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the user name field at login could be used to enumerate LDAP data. This is only the case for LDAP search configuration. This issue has been fixed in version 8.0. Scope: local bookworm: resolved (fix

CVE-2022-31085 [MEDIUM] CVE-2022-31085: ldap-account-manager - LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, gr... LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by configuration. This issue has been fixed in version

CVE-2018-8764 [HIGH] CVE-2018-8764: ldap-account-manager - Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF ... Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sec_token parameter of a URI, which makes it easier for remote attackers to defeat a CSRF protection mechanism by leveraging logging. Scope: local bookworm: resolved (fixed in 6.3-1) bullseye: resolved (fixed in 6.3-1) forky: resolved (fixed in 6.3-1) sid: resolve

CVE-2018-8763 [MEDIUM] CVE-2018-8763: ldap-account-manager - Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via th... Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=rename_form URI. Scope: local bookworm: resolved (fixed in 6.3-1) bullseye: resolved (fixed in 6.3-1) forky: resolved (fixed in 6.3-1) s

CVE-2013-4453 [MEDIUM] CVE-2013-4453: ldap-account-manager - Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account ... Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter. Scope: local bookworm: resolved (fixed in 4.4-1) bullseye: resolved (fixed in 4.4-1) forky: resolved (fixed in 4.4-1) sid: resolved (fixed in 4.4-1) trixie:

CVE-2012-1114 [MEDIUM] CVE-2012-1114: ldap-account-manager - A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) ... A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php. Scope: local bookworm: resolved (fixed in 3.6-2) bullseye: resolved (fixed in 3.6-2) forky: resolved (fixed in 3.6-2) sid: resolved (fixed in 3.6-2) trixi

CVE-2012-1115 [MEDIUM] CVE-2012-1115: ldap-account-manager - A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) ... A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php. Scope: local bookworm: resolved (fixed in 3.6-2) bullseye: resolved (fixed in 3.6-2) forky: resolved (fixed in 3.6-2) sid: resolved (fixed in 3.6-2) trixie: resolved (fixed in 3.6-2)

CVE-2007-1840 [MEDIUM] CVE-2007-1840: ldap-account-manager - lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML ... lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS). Scope: local bookworm: resolved (fixed in 1.1.1-2) bullseye: resolved (fixed in 1.1.1-2) forky: resolved (fixed in 1.1.1-2) sid: resolved (fixed in

CVE-2006-7191 [HIGH] CVE-2006-7191: ldap-account-manager - Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM... Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program. Scope: local bookworm: resolved (fixed in 1.0.0-1) bullseye: resolved (fixed in 1.0.0-1) forky: resolved (fixed in 1.0.0-1) sid: resolved (fixed in 1.0.0-1) trixie: