CVE-2011-4075
NoneCVSS
—
EPSS
51.9%
Published
Nov 2, 2011
CISA due date
—
The record
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:12 | phpldapadmin | 0 | 1.2.0.5-2.1 |
| Debian:13 | phpldapadmin | 0 | 1.2.0.5-2.1 |
| Debian:5.0 | phpldapadmin | 0 | 1.1.0.5-6+lenny2 |
| Debian:6.0 | phpldapadmin | 0 | 1.2.0.5-2+squeeze1 |
Related vulnerabilities
- CVE-2024-9102 phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users… Also affects phpldapadmin
- CVE-2024-9101 A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of… Also affects phpldapadmin
- CVE-2017-11107 phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element… Also affects phpldapadmin
- CVE-2005-2792 Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows… Also affects phpldapadmin
- CVE-2026-114125 Storybook is a frontend workshop for building user interface components and pages in… CWE-94
- CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. CWE-94
- CVE-2026-112100 A vulnerability was determined in DeepPavlov up to 1.7.0. CWE-94
- CVE-2026-112095 A flaw has been found in SourceCodester Inventory System 1.0. CWE-94