=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== phpldapadmin-1.2.2/htdocs/update_confirm.php-216- phpldapadmin-1.2.2/htdocs/update_confirm.php:217: echo $_SESSION[APPCONFIG]->getFriendlyHTML($attribute); phpldapadmin-1.2.2/htdocs/update_confirm.php-218- } ############################################## phpldapadmin-1.2.2/htdocs/entry_chooser.php-26-echo ' function returnDN(dn) {'; phpldapadmin-1.2.2/htdocs/entry_chooser.php:27:printf(" eval ('o = opener.document.getElementById(\"%s\").%s;');",$request['form'],$request['element']); phpldapadmin-1.2.2/htdocs/entry_chooser.php-28-echo ' o.value = dn;'; ############################################## phpldapadmin-1.2.2/lib/emuhash_functions.php-74- $cmd = sprintf('%s %s -binary <%s',$emuhash_emu['openssl'],$openssl_hash_id,$tmpfile); phpldapadmin-1.2.2/lib/emuhash_functions.php:75: $prog = popen($cmd,'r'); phpldapadmin-1.2.2/lib/emuhash_functions.php-76- $pass = fread($prog,1024); ############################################## phpldapadmin-1.2.2/lib/functions.php-55- if (file_exists(HOOKSDIR."classes/$className.php")) phpldapadmin-1.2.2/lib/functions.php:56: require_once(HOOKSDIR."classes/$className.php"); phpldapadmin-1.2.2/lib/functions.php-57- elseif (file_exists(LIBDIR."$className.php")) phpldapadmin-1.2.2/lib/functions.php:58: require_once(LIBDIR."$className.php"); phpldapadmin-1.2.2/lib/functions.php-59- elseif (file_exists(LIBDIR."ds_$className.php")) phpldapadmin-1.2.2/lib/functions.php:60: require_once(LIBDIR."ds_$className.php"); phpldapadmin-1.2.2/lib/functions.php-61- else ############################################## phpldapadmin-1.2.2/lib/functions.php-71-} else { phpldapadmin-1.2.2/lib/functions.php:72: eval('function __autoload($className) {pla_autoload($className);}'); phpldapadmin-1.2.2/lib/functions.php-73-} ############################################## phpldapadmin-1.2.2/lib/functions.php-1010- # anonymous functions were introduced in PHP 5.3.0 phpldapadmin-1.2.2/lib/functions.php:1011: return eval("return function(".$args."){".$code."};"); phpldapadmin-1.2.2/lib/functions.php-1012- ############################################## phpldapadmin-1.2.2/lib/functions.php-2745- phpldapadmin-1.2.2/lib/functions.php:2746: # Case where neither $a, nor $b are in $attrs_display_order, $a_key = $b_key = one greater than num elements. phpldapadmin-1.2.2/lib/functions.php-2747- # So we sort them alphabetically ############################################## phpldapadmin-1.2.2/tools/po/Makefile-25-all-mo: phpldapadmin-1.2.2/tools/po/Makefile:26: @for i in `ls -1 $(LOCALEDIR)` ; \ phpldapadmin-1.2.2/tools/po/Makefile-27- do \ ############################################## phpldapadmin-1.2.2/tools/po/Makefile-42-all-merge-pot: phpldapadmin-1.2.2/tools/po/Makefile:43: @for i in `ls -1 $(LOCALEDIR)` ; \ phpldapadmin-1.2.2/tools/po/Makefile-44- do \ ############################################## phpldapadmin-1.2.2/debian/config-8-# Autoconfiguration for phpldapadmin phpldapadmin-1.2.2/debian/config:9:if [ ! -f $CONFFILE ] || [ `md5sum $CONFFILE | awk '{print $1}'` = "49dc066603a3a22a24eb482181912c57" ]; then phpldapadmin-1.2.2/debian/config-10- ############################################## phpldapadmin-1.2.2/debian/config-18- fi phpldapadmin-1.2.2/debian/config:19: basedn=`grep ^suffix /etc/ldap/slapd.conf | awk '{print $2}' | sed -e s/\"//g` phpldapadmin-1.2.2/debian/config:20: binddn=`sed --silent --expression '/^ *by dn=.* write/s/^.*\(dn=[^ ]*\).*$/\1/p' /etc/ldap/slapd.conf | head -n1` phpldapadmin-1.2.2/debian/config-21- elif [ -f /etc/libnss-ldap.conf ]; then phpldapadmin-1.2.2/debian/config-22- if grep "^host" /etc/libnss-ldap.conf > /dev/null 2>&1; then phpldapadmin-1.2.2/debian/config:23: ldapserver=`grep ^host /etc/libnss-ldap.conf | awk '{print $2}'` phpldapadmin-1.2.2/debian/config-24- elif grep "^uri" /etc/libnss-ldap.conf > /dev/null 2>&1; then phpldapadmin-1.2.2/debian/config:25: ldapserver=`grep ^uri /etc/libnss-ldap.conf | sed -e s@/@@g | awk -F : '{print $2}'` phpldapadmin-1.2.2/debian/config-26- fi ############################################## phpldapadmin-1.2.2/debian/config-31- fi phpldapadmin-1.2.2/debian/config:32: basedn=`grep -e "^base" /etc/libnss-ldap.conf | awk '{print $2}' | sed -e s/\"//g` phpldapadmin-1.2.2/debian/config:33: binddn=`grep -e "^rootbinddn" /etc/libnss-ldap.conf | awk '{print $2}'` phpldapadmin-1.2.2/debian/config-34- elif [ -f /etc/pam_ldap.conf ]; then phpldapadmin-1.2.2/debian/config-35- if grep "^host" /etc/pam_ldap.conf > /dev/null 2>&1; then phpldapadmin-1.2.2/debian/config:36: ldapserver=`grep ^host /etc/pam_ldap.conf | awk '{print $2}'` phpldapadmin-1.2.2/debian/config-37- elif grep "^uri" /etc/pam_ldap.conf > /dev/null 2>&1; then phpldapadmin-1.2.2/debian/config:38: ldapserver=`grep ^uri /etc/pam_ldap.conf | sed -e s@/@@g | awk -F : '{print $2}'` phpldapadmin-1.2.2/debian/config-39- fi ############################################## phpldapadmin-1.2.2/debian/config-44- fi phpldapadmin-1.2.2/debian/config:45: basedn=`grep -e "^base" /etc/pam_ldap.conf | awk '{print $2}' | sed -e s/\"//g` phpldapadmin-1.2.2/debian/config:46: binddn=`grep -e "^rootbinddn" /etc/pam_ldap.conf | head -n1 | awk '{print $2}'` phpldapadmin-1.2.2/debian/config-47- fi ############################################## phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch-25- if (file_exists(HOOKSDIR."classes/$className.php")) phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch:26: require_once(HOOKSDIR."classes/$className.php"); phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch-27- elseif (file_exists(LIBDIR."$className.php")) ############################################## phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch-34-+} else { phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch:35:+ eval('function __autoload($className) {pla_autoload($className);}'); phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch-36-+} ############################################## phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch-52-+ # anonymous functions were introduced in PHP 5.3.0 phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch:53:+ return eval("return function(".$args."){".$code."};"); phpldapadmin-1.2.2/debian/patches/php-7.2-compat.patch-54-+ ############################################## phpldapadmin-1.2.2/debian/rules-44- for po in debian/phpldapadmin/usr/share/phpldapadmin/locale/*/LC_MESSAGES/*.po; do \ phpldapadmin-1.2.2/debian/rules:45: (cd `dirname $$po`; msgfmt messages.po); \ phpldapadmin-1.2.2/debian/rules-46- done ############################################## phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php-55- if (file_exists(HOOKSDIR."classes/$className.php")) phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php:56: require_once(HOOKSDIR."classes/$className.php"); phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php-57- elseif (file_exists(LIBDIR."$className.php")) phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php:58: require_once(LIBDIR."$className.php"); phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php-59- elseif (file_exists(LIBDIR."ds_$className.php")) phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php:60: require_once(LIBDIR."ds_$className.php"); phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php-61- else ############################################## phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php-2711- phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php:2712: # Case where neither $a, nor $b are in $attrs_display_order, $a_key = $b_key = one greater than num elements. phpldapadmin-1.2.2/.pc/php-5.5-compat.patch/lib/functions.php-2713- # So we sort them alphabetically ############################################## phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php-55- if (file_exists(HOOKSDIR."classes/$className.php")) phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php:56: require_once(HOOKSDIR."classes/$className.php"); phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php-57- elseif (file_exists(LIBDIR."$className.php")) phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php:58: require_once(LIBDIR."$className.php"); phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php-59- elseif (file_exists(LIBDIR."ds_$className.php")) phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php:60: require_once(LIBDIR."ds_$className.php"); phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php-61- else ############################################## phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php-2722- phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php:2723: # Case where neither $a, nor $b are in $attrs_display_order, $a_key = $b_key = one greater than num elements. phpldapadmin-1.2.2/.pc/php-7.2-compat.patch/lib/functions.php-2724- # So we sort them alphabetically ############################################## phpldapadmin-1.2.2/.pc/CVE-2017-11107.patch/htdocs/entry_chooser.php-26-echo ' function returnDN(dn) {'; phpldapadmin-1.2.2/.pc/CVE-2017-11107.patch/htdocs/entry_chooser.php:27:printf(" eval ('o = opener.document.getElementById(\"%s\").%s;');",$request['form'],$request['element']); phpldapadmin-1.2.2/.pc/CVE-2017-11107.patch/htdocs/entry_chooser.php-28-echo ' o.value = dn;';