CVE-2011-4075
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote...
CVE-2011-4075 is a high vulnerability (CVSS 7.5) in Phpldapadmin Project Phpldapadmin, published October 31, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 51.9%, the 98th percentile. Fixed in phpldapadmin 1.2.0.5-2.1.
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
Exploit likelihood
What each source reports
NVD Score used
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
- Record
CVE-2011-4075- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
- Record
CVE-2011-4075- Updated
- 2026-11-02
EUVDEUVD-2011-4027 No score
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
- Record
EUVD-2011-4027- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5h4f-2c6r-8cj3 No score
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote...
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
- Record
GHSA-5h4f-2c6r-8cj3- Weakness
- CWE-94
- Updated
- 2026-11-02
OSV No score
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
- Record
CVE-2011-4075- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4075 No score
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
- Record
DEBIAN-CVE-2011-4075- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpldapadminDebian:12 |
before 1.2.0.5-2.1 | 1.2.0.5-2.1 |
phpldapadminDebian:13 |
before 1.2.0.5-2.1 | 1.2.0.5-2.1 |
phpldapadminDebian:14 |
before 1.2.0.5-2.1 | 1.2.0.5-2.1 |
phpldapadminDebian:6.0 |
before 1.2.0.5-2+squeeze1, plus listed versions 1.2.0.5-2 |
1.2.0.5-2+squeeze1 |
phpldapadminDebian:5.0 |
before 1.1.0.5-6+lenny2, plus listed versions 1.1.0.5-61.1.0.5-6+lenny1 |
1.1.0.5-6+lenny2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1) | 2011-10-23 |
| Exploit-DB | phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (Metasploit) (2) | 2011-10-25 |
| Metasploit | phpLDAPadmin query_engine Remote PHP Code Injection | 2011-10-24 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
References
sourceforge.net/tracker/index.php?func=detail&aid=3417184&group_id=61828&atid=498546
osvdb.org/76594
securityfocus.com/bid/50331
openwall.com/lists/oss-security/2011/10/25/2
exploit-db.com/exploits/18021
phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin%3Ba=blobdiff%3Bf=lib/functions.php%3Bh=eb160dc9f7d74e563131e21d4c85d7849a0c6638%3Bhp=19fde9974d4e5eb3bfac04bb223ccbefdb98f9a0%3Bhb=76e6dad13ef77c5448b8dfed1a61e4acc7241165%3Bhpb=5d4245f93ae6f065e7535f268e3cd87a23b07744
Show 10 moreShow less
dev.metasploit.com/redmine/issues/5820
secunia.com/advisories/46672
phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
debian.org/security/2011/dsa-2333
nvd.nist.gov/vuln/detail/CVE-2011-4075
github.com/advisories/GHSA-5h4f-2c6r-8cj3
security-tracker.debian.org/tracker/CVE-2011-4075