OpenLDAP back-sql LDAP Search SQL 注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://security.snyk.io/vuln/SNYK-AMZN201803-OPENLDAPSERVERSSQL-2847756
• https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.LDAP:OPENLDAP-BACKSQL-SQLI.html
• https://nvd.nist.gov/vuln/detail/CVE-2022-29155
• https://www.cloudfoundry.org/blog/usn-5424-1-openldap-vulnerability/
• https://www.debian.org/security/2022/dsa-5140
• https://access.redhat.com/security/cve/cve-2022-29155
• https://www.cve.org/CVERecord?id=CVE-2022-29155
• https://github.com/advisories/GHSA-9rm2-9q89-9524
• https://www.asustor.com/en/security/security_advisory_detail?id=13
• https://bugs.openldap.org/show_bug.cgi?id=9815
• https://avd.aliyun.com/detail?id=AVD-2022-29155
• https://lists.openldap.org/hyperkitty/list/openldap-bugs@openldap.org/thread/HC6DLQGGW2EEOGFMTTRS5MCH2YP5QB4H/

Related Vulnerabilities

• PoCCVE-2026-59509: cve-search 4.0-6.0.0 - Unauthenticated NoSQL Injection
• Cloudreve网盘 /api/v3/share/search 未授权访问漏洞
• Piwigo /ws.php pwg.history.search 未授权访问漏洞（CVE-2026-27833）
• WordPress WP-Advanced-Search /autocompletion-PHP5.5.php SQL 注入漏洞（CVE-2024-9796）
• MLflow /ajax-api/3.0/jobs/search 权限绕过漏洞 （CVE-2026-2652）
• 深信服运维安全管理系统 /fort/login/search_login 信息泄露漏洞
• SillyTavern /api/search/searxng 服务器端请求伪造漏洞（CVE-2026-46372）
• 用友KSOA search_list.jsp 存在sql注入漏洞
• PoCCVE-2026-42031: CKAN DataStore SQL Search - SQL Injection
• CKAN /api/action/datastore_search_sql SQL 注入漏洞（CVE-2026-42031）
• 用友NC Cloud /ncchr/pm/ref/indiIssued/blobRefClassSearch 代码执行漏洞
• PoCCVE-2025-71258: BMC FootPrints 'searchWeb' - Server-Side Request Forgery
• 东胜物流软件 HtmlSearchServiceLCL.aspx 存在SQL注入漏洞