Medium severity5.4NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026
CVE-2020-35132
CVE-2020-35132
Description
An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:phpldapadmin_project:phpldapadmin:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpldapadmin_project:phpldapadmin:*:*:*:*:*:*:*:*range: <1.2.6.2
- (no CPE)range: <1.2.6.2
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- github.com/leenooks/phpLDAPadmin/commit/c87571f6b7be15d5cd8b26381b6eb31ad03d28e2nvdPatchThird Party Advisory
- github.com/leenooks/phpLDAPadmin/compare/1.2.5...1.2.6.2nvdPatchThird Party Advisory
- github.com/leenooks/phpLDAPadmin/issues/130nvdExploitIssue TrackingThird Party Advisory
- bugs.launchpad.net/ubuntu/+source/phpldapadmin/+bug/1906474nvdIssue TrackingThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XA42XDSUPCOXL5ZCP5RGD3FD4JQQWNX/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6PZH3EY2T66N2MGOA7DWCAIVYIJH4BC/nvd
News mentions
0No linked articles in our index yet.