CVE-2018-1000869

2018-12-2017:00:00

mitre

www.cve.org

phpipam version 1.3.2

cwe-89 vulnerability

sql injection

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

66.0%

JSON

phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection… This attack appear to be exploitable via Rough user, exploiting the vulnerability to access information he/she does not have access to… This vulnerability appears to have been fixed in 1.4.