Lucene search
K

CVE-2023-1211

🗓️ 06 Mar 2023 00:00:00Reported by @huntrdevType 
cve
 cve
🔗 web.nvd.nist.gov👁 84 Views🌐 WEB

SQL Injection in phpipam/phpipam v1.5.

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2023-1211
7 Mar 202300:15
attackerkb
Circl
CVE-2023-1211
7 Mar 202302:13
circl
CNNVD
phpIPAM SQL注入漏洞
7 Mar 202300:00
cnnvd
Cvelist
CVE-2023-1211 SQL Injection in phpipam/phpipam
6 Mar 202300:00
cvelist
Huntr
SQL Injection in Custom Fields
10 Feb 202312:46
huntr
Exploit DB
phpIPAM 1.5.1 - SQL Injection
2 Dec 202500:00
exploitdb
EUVD
EUVD-2023-23490
3 Oct 202520:07
euvd
NVD
CVE-2023-1211
7 Mar 202300:15
nvd
OpenVAS
phpIPAM < 1.5.2 Multiple Vulnerabilities
8 Mar 202300:00
openvas
OSV
CVE-2023-1211 SQL Injection in phpipam/phpipam
6 Mar 202300:00
osv
Rows per page
NVD
Node
phpipamphpipamRange<1.5.2
[
  {
    "vendor": "phpipam",
    "product": "phpipam/phpipam",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "v1.5.2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
csrf_cookierequest bodyapp/admin/custom-fields/edit-result.phpSQL Injection via fieldSize param in custom field edit-result endpoint (CWE-89)CWE-89
actionrequest bodyapp/admin/custom-fields/edit-result.phpSQL Injection via fieldSize param in custom field edit-result endpoint (CWE-89)CWE-89
namerequest bodyapp/admin/custom-fields/edit-result.phpSQL Injection via fieldSize param in custom field edit-result endpoint (CWE-89)CWE-89
fieldTyperequest bodyapp/admin/custom-fields/edit-result.phpSQL Injection via fieldSize param in custom field edit-result endpoint (CWE-89)CWE-89
fieldSizerequest bodyapp/admin/custom-fields/edit-result.phpSQL Injection via fieldSize param in custom field edit-result endpoint (CWE-89)CWE-89
tablerequest bodyapp/admin/custom-fields/edit-result.phpSQL Injection via fieldSize param in custom field edit-result endpoint (CWE-89)CWE-89
Commentrequest bodyapp/admin/custom-fields/edit-result.phpSQL Injection via fieldSize param in custom field edit-result endpoint (CWE-89)CWE-89
NULLrequest bodyapp/admin/custom-fields/edit-result.phpSQL Injection via fieldSize param in custom field edit-result endpoint (CWE-89)CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Feb 2026 15:18Current
7.3High risk
Vulners AI Score7.3
CVSS 3.17.2
CVSS 37.2
EPSS0.00313
SSVC
84