Vulnerability Database · Debian · phpldapadmin · Version

phpldapadmin 1.2.6.7-2

1.2.6.7-2 is affected by 5 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 1 High 0 Medium 0 Low 0 Unrated 4

Database updated 22/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

phpldapadmin 1.2.6.7-2 vulnerabilities

5 vulnerabilities cover phpldapadmin 1.2.6.7-2. Open the full list in the database.

Vulnerability Severity Fixed version Disclosed
LDAP Injection in phpLDAPadmin 9.8 critical No fix published 22 Jun 2018
Reflected XSS Vulnerability in phpLDAPadmin: Execute Arbitrary JavaScript via 'element' Parameter N/A unrated No fix published 19 Dec 2024
CSV Formula Injection Vulnerability in phpLDAPadmin N/A unrated No fix published 19 Dec 2024
CSV Formula Injection Vulnerability in phpLDAPadmin N/A unrated No fix published 19 Dec 2024
LDAP Injection Vulnerability in phpLDAPadmin: CVE-2018-12689 N/A unrated No fix published 22 Jun 2018

Looking for another version, or everything Vulert holds for phpldapadmin?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About phpldapadmin 1.2.6.7-2

Is phpldapadmin 1.2.6.7-2 vulnerable?

Yes. 5 vulnerabilities in the Vulert database cover phpldapadmin 1.2.6.7-2: 1 critical, 0 high, 0 medium and 0 low, plus 4 not yet rated. Each entry above names the fixed version to move to.

How do I monitor phpldapadmin for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the phpldapadmin version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.