CVE-2018-20806: Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).
Please fix it.
Standards version of the package is outdated.
high
The package is severely out of date with respect to the Debian Policy.The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.3.0 instead of
3.9.5).
Depends on packages which need a new maintainer
normal
The packages that phamm depends on which need a new maintainer are:
![[bug history graph]](https://qa.debian.org/data/bts/graphs/p/phamm.png){kind=link}