Skip to content
Sign in
6.5 Medium

CVE-2025-27631 The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code…

Description

The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the website.

Affected products and versions

Product Affected versions Fixed in
TRMTracker 6.3 6.3 → 6.3.01 No fix stated
TRMTracker 6.2 6.2 → 6.2.04 No fix stated

Other CVEs of TRMTracker

The 3 CVEs of TRMTracker →
CVE-2025-27633 The TRMTracker web application is vulnerable to reflected Cross-site scripting attack 6.1 Medium CVE-2025-27632 A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value… 6.1 Medium
Track this CVE