CVE-2011-4074
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows...
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.
- Record
CVE-2011-4074- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.
- Record
CVE-2011-4074- Updated
- 2026-11-02
EUVDEUVD-2011-4026 No score
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.
- Record
EUVD-2011-4026- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-prjv-38qj-jwcv No score
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows...
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.
- Record
GHSA-prjv-38qj-jwcv- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.
- Record
CVE-2011-4074- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4074 No score
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command.
- Record
DEBIAN-CVE-2011-4074- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpldapadminDebian:12 |
before 1.2.0.5-2.1 | 1.2.0.5-2.1 |
phpldapadminDebian:13 |
before 1.2.0.5-2.1 | 1.2.0.5-2.1 |
phpldapadminDebian:14 |
before 1.2.0.5-2.1 | 1.2.0.5-2.1 |
phpldapadminDebian:6.0 |
before 1.2.0.5-2+squeeze1, plus listed versions 1.2.0.5-2 |
1.2.0.5-2+squeeze1 |
phpldapadminDebian:5.0 |
before 1.1.0.5-6+lenny2, plus listed versions 1.1.0.5-61.1.0.5-6+lenny1 |
1.1.0.5-6+lenny2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1) | 2011-10-23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4074 is a medium vulnerability (CVSS 4.3) in Phpldapadmin Project Phpldapadmin, published October 31, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.39%, the 92nd percentile. Fixed in phpldapadmin 1.2.0.5-2.1.
References
securityfocus.com/bid/50331
openwall.com/lists/oss-security/2011/10/25/2
secunia.com/advisories/46672
osvdb.org/76593
Show 7 moreShow less
phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
debian.org/security/2011/dsa-2333
phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin%3Ba=blobdiff%3Bf=htdocs/cmd.php%3Bh=0ddf0044355abc94160be73122eb34f3e48ab2d9%3Bhp=34f3848fe4a6d4c00c7c568afa81f59579f5d724%3Bhb=64668e882b8866fae0fa1b25375d1a2f3b4672e2%3Bhpb=caeba72171ade4f588fef1818aa4f6243a68b85e
nvd.nist.gov/vuln/detail/CVE-2011-4074
github.com/advisories/GHSA-prjv-38qj-jwcv
security-tracker.debian.org/tracker/CVE-2011-4074