CVE-2012-1115

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.

• CWE-79

• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089297.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089313.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2012/03/05/24Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/03/12/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/03/12/10Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/52255Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1115Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73971Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74357Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2012-1115Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089297.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089313.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2012/03/05/24Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/03/12/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/03/12/10Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/52255Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1115Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73971Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74357Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2012-1115Third Party Advisory

Published

Dec 5, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1109mwlib 0.13 through 0.13.4 has a denial of service vulnerabil…7.5
• CVE-2012-1110Multiple cross-site scripting (XSS) vulnerabilities in Etano…
• CVE-2012-1111lightdm before 1.0.9 does not properly close file descriptor…
• CVE-2012-1112Directory traversal vulnerability in Open-Realty CMS 2.5.8 a…
• CVE-2012-1113Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2012-1114A Cross-Site Scripting (XSS) vulnerability exists in LDAP Ac…6.1
• CVE-2012-1116SQL injection vulnerability in Joomla! 1.7.x and 2.5.x befor…
• CVE-2012-1117Cross-site scripting (XSS) vulnerability in Joomla! 2.5.0 an…
• CVE-2012-1118The access_has_bug_level function in core/access_api.php in …
• CVE-2012-1119MantisBT before 1.2.9 does not audit when users copy or clon…
• CVE-2012-1120The SOAP API in MantisBT before 1.2.9 does not properly enfo…
• CVE-2012-1121MantisBT before 1.2.9 does not properly check permissions, w…