[phpldapadmin] [ phpldapadmin-Bugs-3288434 ] Security Bug

Bugs item #3288434, was opened at 2011-04-17 20:23
Message generated for change (Comment added) made by wurley
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=3288434&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Closed
Resolution: Fixed
Priority: 5
Private: Yes
Submitted By: Yuli (yuli_s)
Assigned to: Nobody/Anonymous (nobody)
Summary: Security Bug

Initial Comment:
I would like to report 2 security bugs that were found by our web security scanner 
in one of the sites used to run phpldapadmin (version 1.2.0.5)

It is very easy to reproduce both bugs. They happen on the same page
(no need to login):

http://www.my-ste.com/phpldapadmin/htdocs/cmd.php?cmd=login_form&server_id='"
It will print the "PHP Debug Backtrace" page together with absolute
location of the php files (such bug is called Full Path Disclosure bug)

http://www.my-site.com/phpldapadmin/htdocs/cmd.php?cmd=login_form&server_id=<script>alert(1)</script>
When executed an alert js message is printed. This is an XSS on the same page.


Please inform us when you will fix these bugs. We would like to publish a note in our blog.



Best regards
Yuli

[email protected]

http://www.zerodayscan.com
http://www.kyplex.com


----------------------------------------------------------------------

>Comment By: Deon George (wurley)
Date: 2011-04-28 07:53

Message:
Hopefully soon, after I get through all the open bugs.

----------------------------------------------------------------------

Comment By: Yuli (yuli_s)
Date: 2011-04-28 00:21

Message:
Great,

When you are planing to release new version ?


----------------------------------------------------------------------

Comment By: Deon George (wurley)
Date: 2011-04-26 22:36

Message:
Thanks for the notice.

A commit has been submitted to git to address the first issue (#fc5885b).

The 2nd issue has already been fixed by bug #2969826

...deon

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=3288434&group_id=61828

------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/