CVE-2011-4074

Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.

• CWE-79

• http://openwall.com/lists/oss-security/2011/10/24/9Exploit, Patch
• http://openwall.com/lists/oss-security/2011/10/25/2Exploit, Patch
• http://osvdb.org/76593
• http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin%3Ba=blobdiff%3Bf=htdocs/cmd.php%3Bh=0ddf0044355abc94160be73122eb34f3e48ab2d9%3Bhp=34f3848fe4a6d4c00c7c568afa81f59579f5d724%3Bhb=64668e882b8866fae0fa1b25375d1a2f3b4672e2%3Bhpb=caeba72171ade4f588fef1818aa4f6243a68b85e
• http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
• http://secunia.com/advisories/46551Vendor Advisory
• http://secunia.com/advisories/46672
• http://www.debian.org/security/2011/dsa-2333
• http://www.securityfocus.com/bid/50331
• http://openwall.com/lists/oss-security/2011/10/24/9Exploit, Patch
• http://openwall.com/lists/oss-security/2011/10/25/2Exploit, Patch
• http://osvdb.org/76593
• http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin%3Ba=blobdiff%3Bf=htdocs/cmd.php%3Bh=0ddf0044355abc94160be73122eb34f3e48ab2d9%3Bhp=34f3848fe4a6d4c00c7c568afa81f59579f5d724%3Bhb=64668e882b8866fae0fa1b25375d1a2f3b4672e2%3Bhpb=caeba72171ade4f588fef1818aa4f6243a68b85e
• http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
• http://secunia.com/advisories/46551Vendor Advisory
• http://secunia.com/advisories/46672
• http://www.debian.org/security/2011/dsa-2333
• http://www.securityfocus.com/bid/50331

Published

Nov 2, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4064Cross-site scripting (XSS) vulnerability in the setup interf…
• CVE-2011-4066SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.0…
• CVE-2011-4068The check_password function in html/admin/login.php in Packe…
• CVE-2011-4069html/admin/login.php in PacketFence before 3.0.2 allows remo…
• CVE-2011-4072Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-4073Use-after-free vulnerability in the cryptographic helper han…
• CVE-2011-4075The masort function in lib/functions.php in phpLDAPadmin 1.2…
• CVE-2011-4076OpenStack Nova before 2012.1 allows someone with access to a…5.9
• CVE-2011-4077Buffer overflow in the xfs_readlink function in fs/xfs/xfs_v…
• CVE-2011-4078include/iniset.php in Roundcube Webmail 0.5.4 and earlier, w…
• CVE-2011-4079Off-by-one error in the UTF8StringNormalize function in Open…
• CVE-2011-4080The sysrq_sysctl_handler function in kernel/sysctl.c in the …