cid 96385280974c9f363217f3ce61c3209b68c1f32bd2ab3aad72b2c104be535440 · original · open access · via wikipedia
Title: LDAP injection Authors: Venue: Wikipedia Year: unknown Canonical: wiki:ldap-injection URL: https://en.wikipedia.org/wiki/LDAP_injection Collector: wikipedia OA: true ABSTRACT In computer security, LDAP injection is a code injection technique used to exploit web applications which could reveal sensitive user information or modify information represented in the LDAP data stores. LDAP injection exploits a security vulnerability in an application by manipulating input parameters passed to internal search, add or modify functions. When an application fails to properly sanitize user input, it is possible for an attacker to modify an LDAP statement.