← Database

CVE-2007-1840

MEDIUM CVSS: 4.3 Published: 2007-04-03 Modified: 2026-06-16

Description

lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).

Affected Platforms

Ldap Account Manager Ldap Account Manager

Weakness Type

NVD-CWE-Other

References