https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:38:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04005 bdu:2022-04005 https://cve.radiocsirt.org/vuln/bdu:2022-04005 https://cve.radiocsirt.org/vuln/cnvd-2022-53545 cnvd-2022-53545 https://cve.radiocsirt.org/vuln/cnvd-2022-53545 https://cve.radiocsirt.org/vuln/euvd-2026-233958 EUVD-2026-233958 https://cve.radiocsirt.org/vuln/euvd-2026-233958 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31087 <p>LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the tmp directory, which is accessible by /lam/tmp/, allows interpretation of .php (and .php5/.php4/.phpt/etc) files. An attacker capable of writing files under www-data privileges can write a web-shell into this directory, and gain a Code Execution on the host. This issue has been fixed in version 8.0. Users unable to upgrade should disallow executing PHP scripts in (/var/lib/ldap-account-manager/)tmp directory.</p> <p>LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the tmp directory, which is accessible by /lam/tmp/, allows interpretation of .php (and .php5/.php4/.phpt/etc) files. An attacker capable of writing files under www-data privileges can write a web-shell into this directory, and gain a Code Execution on the host. This issue has been fixed in version 8.0. Users unable to upgrade should disallow executing PHP scripts in (/var/lib/ldap-account-manager/)tmp directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31087 https://cve.radiocsirt.org/vuln/gsd-2022-31087 gsd-2022-31087 https://cve.radiocsirt.org/vuln/gsd-2022-31087 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31087 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:20.04:LTS: ldap-account-manager, Ubuntu:22.04:LTS: ldap-account-manager, Ubuntu:25.10: ldap-account-manager, Ubuntu:26.04:LTS: ldap-account-manager</p> <p>LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the tmp directory, which is accessible by /lam/tmp/, allows interpretation of .php (and .php5/.php4/.phpt/etc) files. An attacker capable of writing files under www-data privileges can write a web-shell into this directory, and gain a Code Execution on the host. This issue has been fixed in version 8.0. Users unable to upgrade should disallow executing PHP scripts in (/var/lib/ldap-account-manager/)tmp directory.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:20.04:LTS: ldap-account-manager, Ubuntu:22.04:LTS: ldap-account-manager, Ubuntu:25.10: ldap-account-manager, Ubuntu:26.04:LTS: ldap-account-manager</p> <p>LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the tmp directory, which is accessible by /lam/tmp/, allows interpretation of .php (and .php5/.php4/.phpt/etc) files. An attacker capable of writing files under www-data privileges can write a web-shell into this directory, and gain a Code Execution on the host. This issue has been fixed in version 8.0. Users unable to upgrade should disallow executing PHP scripts in (/var/lib/ldap-account-manager/)tmp directory.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31087