Language:
Severity: High
ID: 56703
File Name: phpldapadmin_orderby_cmd_exec.nasl
Version: 1.19
Type: remote
Family: CGI abuses
Published: 11/3/2011
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Factor: High
Score: 7.4
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CPE: cpe:/a:deon_george:phpldapadmin
Required KB Items: www/PHP, www/phpLDAPadmin
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Exploited by Nessus: true
Patch Publication Date: 10/5/2011
Vulnerability Publication Date: 10/23/2011
Core Impact
Metasploit (phpLDAPadmin query_engine Remote PHP Code Injection)
Elliot (phpLDAPadmin 1.2.1.1 RCE)
CVE: CVE-2011-4075
BID: 50331