https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:39:03.892604+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04005 bdu:2022-04005 2026-10-06T17:39:03.896491+00:00 bdu:2022-04005 https://cve.radiocsirt.org/vuln/cnvd-2022-53545 cnvd-2022-53545 2026-10-06T17:39:03.896524+00:00 cnvd-2022-53545 https://cve.radiocsirt.org/vuln/euvd-2026-233958 EUVD-2026-233958 2026-10-06T17:39:03.896538+00:00 EUVD-2026-233958 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31087 fkie_cve-2022-31087 2026-10-06T17:39:03.896549+00:00

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the tmp directory, which is accessible by /lam/tmp/, allows interpretation of .php (and .php5/.php4/.phpt/etc) files. An attacker capable of writing files under www-data privileges can write a web-shell into this directory, and gain a Code Execution on the host. This issue has been fixed in version 8.0. Users unable to upgrade should disallow executing PHP scripts in (/var/lib/ldap-account-manager/)tmp directory.

 https://cve.radiocsirt.org/vuln/gsd-2022-31087 gsd-2022-31087 2026-10-06T17:39:03.896587+00:00 gsd-2022-31087 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31087 UBUNTU-CVE-2022-31087 2026-10-06T17:39:03.896599+00:00

Affected: Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:20.04:LTS: ldap-account-manager, Ubuntu:22.04:LTS: ldap-account-manager, Ubuntu:25.10: ldap-account-manager, Ubuntu:26.04:LTS: ldap-account-manager

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the tmp directory, which is accessible by /lam/tmp/, allows interpretation of .php (and .php5/.php4/.phpt/etc) files. An attacker capable of writing files under www-data privileges can write a web-shell into this directory, and gain a Code Execution on the host. This issue has been fixed in version 8.0. Users unable to upgrade should disallow executing PHP scripts in (/var/lib/ldap-account-manager/)tmp directory.