CVE-2011-4075
N/A
Published: November 2, 2011 at 05:00 PM UTC
Updated: June 16, 2026 at 11:34 PM UTC
1 product affected across 1 vendorPhpldapadmin
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 52%
Description
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (12)
Mailing Listx_refsource_MLISTExploitPatch
Source: [email protected]
http://openwall.com/lists/oss-security/2011/10/24/9Mailing Listx_refsource_MLISTExploitPatch
Source: [email protected]
http://openwall.com/lists/oss-security/2011/10/25/2x_refsource_CONFIRM
Source: [email protected]
http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin%3Ba=blobdiff%3Bf=lib/functions.php%3Bh=eb160dc9f7d74e563131e21d4c85d7849a0c6638%3Bhp=19fde9974d4e5eb3bfac04bb223ccbefdb98f9a0%3Bhb=76e6dad13ef77c5448b8dfed1a61e4acc7241165%3Bhpb=5d4245f93ae6f065e7535f268e3cd87a23b07744x_refsource_CONFIRM
Source: [email protected]
http://phpldapadmin.sourceforge.net/wiki/index.php/Main_PageThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/46551Quick Info
StatusMODIFIED
CWE
CWE-94
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card