Debian Linux Security Advisory 1965-1 – It was discovered that phpLDAPadmin, a web based interface for administering LDAP servers, doesn’t sanitize an internal variable, which allows remote attackers to include and execute arbitrary local files.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/84884/dsa-1965-1.txt
Source: https://packetstormsecurity.com/files/84884/Debian-Linux-Security-Advisory-1965-1.html