Security Advisory
CVE-2007-1840
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).