CVE-2012-0834: Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows re...

Security readout for executives and security teams

CVE-2012-0834 is a cross-site scripting issue in phpLDAPadmin 1.2.2 and earlier. If an exposed phpLDAPadmin instance processes a malicious base parameter, attacker-supplied script or HTML could run in a user's browser. Business risk is highest where phpLDAPadmin is internet-accessible or used by privileged LDAP administrators. Exposure is likely limited to organizations still running phpLDAPadmin 1.2.2 or earlier, especially if reachable by users or administrators over untrusted networks. Systems without phpLDAPadmin, newer fixed packages, or restricted administrative access are less likely exposed. Treat this as a targeted cleanup item, not an emergency based on the provided evidence. Prioritize quickly if phpLDAPadmin is internet-facing or manages sensitive LDAP directories, because administrator browser compromise could affect directory operations. Mitigation focus: Identify and upgrade phpLDAPadmin installations at version 1.2.2 or earlier.; Apply vendor or distribution updates that reference CVE-2012-0834.; Restrict phpLDAPadmin access to trusted administrative networks or VPN users..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.