Advisories · Technology
phpIPAM.
Every CVE that names phpIPAM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting
- phpIPAM
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
phpIPAM index.php cross site scripting
- phpIPAM
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages
- phpipam
- Broken access control
- CVSS 8.6 High
Incorrect authorization in phpIPAM
- phpIPAM
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache
- phpipam
- CWE-706
- CVSS 8.7 High
phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter
- phpipam
- Broken access control
- CVSS 2.3 Low
PHPIPAM Authenticated LFI
- phpipam
- File inclusion
- CVSS 5.1 Medium
phpipam Section edit-result.php sql injection
- phpipam
- Other injection
- SQL injection
- CVSS 5.4 Medium
Cross-site scripting in phpIPAM
- phpIPAM
- Cross-site scripting (XSS)
- CVSS 2.7 Low
phpipam Header redirect
- phpipam
- Open redirect
- CVSS 2.4 Low
phpipam Import Preview import-load-data.php cross site scripting
- phpipam
- CWE-707
-
PhpIPAM: PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code…
- PhpIPAM
-
PhpIPAM: PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet"…
- PhpIPAM