CVE Request: LDAP Account Manager XSS in login.php

[Salvatore Bonaccorso <carnil () debian org>]

Hi Kurt,

Eric Sesterhenn discovered a XSS vulnerability in login.php of
LDAP Account Manager and reported this to the Debian BTS[1]. It
requires to send malicious data via POST.

 [1] http://bugs.debian.org/726976

Upstream Bugreport:

 [2] http://sourceforge.net/p/lam/bugs/156/

Upstream also has already commited fixes to the VCS:

 [3] http://sourceforge.net/p/lam/code/5074/
 [4] http://sourceforge.net/p/lam/code/5075/

Could you please assign a CVE for this issue?

Regards,
Salvatore