EDB-10410

functional

phpLDAPadmin - Local File Inclusion

view exploit source exploit_dbverifiedtype webappsauthor ipsecspublished 2009-12-10catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2009-4427UShigh7.5Exploit
Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan