CVE-2026-27895

>= 8.5 and < 9.5

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

4.3MEDIUM

CVE-2026-27894

< 9.5

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

8.8HIGH

CVE-2024-23333

< 8.7

LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to sp

7.9HIGH

CVE-2022-31088

< 8.0

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

5.3MEDIUM

CVE-2022-31087

< 8.0

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

7.8HIGH

CVE-2022-31086

< 8.0

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

8.8HIGH

CVE-2022-31085

< 8.0

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

6.1MEDIUM

CVE-2022-31084

< 8.0

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

8.1HIGH

CVE-2022-24851

< 7.9.1

LDAP Account Manager (LAM) is an open source web frontend for managing entries stored in an LDAP directory. The profile editor too

8.1HIGH

CVE-2012-1115

all versions

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn para

6.1MEDIUM

CVE-2012-1114

all versions

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an e

6.1MEDIUM

CVE-2018-8764

< 6.3

Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sec_token parameter of a URI, which m

8.8HIGH

CVE-2018-8763

< 6.3

Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdoc

6.1MEDIUM

CVE-2013-4453

all versions

Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attacker

CVE-2007-1840

<= 1.0_rc2

lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remo

CVE-2006-7191

<= 1.0_rc2

Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileg