C-sharp : Unsafe LDAP access control

In the absence of the correct access control the execution of LDAP query with a parameter controlled by the user may give an attacker unauthorized access to LDAP directories.

LDAP is an application-level protocol for accessing and maintaining distributed directory information services (X.500 directory service). If LDAP query is based on data from an untrusted source (e.g., user input) and the data do not pass validation, an attacker can modify the query and execute it with the application rights.