CVE-2022-23046

CVE-2022-23046 La scoperta originale e il PoC manuale provengono da Fluidattacks: PhpIPAM v1.4.4 consente a un utente amministratore autenticato di iniettare istruzioni SQL nel parametro "subnet" durante la ricerca di una subnet tramite app/admin/routing/edit-bgp-mapping-search.php. Questo PoC...

CVE-2022-23046

CVE-2022-23046 PhpIPAM v1.4.4 erlaubt einem authentifizierten Admin-Benutzer, SQL-Anweisungen im Parameter "subnet" zu injizieren, während er ein Subnetz über app/admin/routing/edit-bgp-mapping-search.php sucht. Installation 1. Erstellen root@kitploit: git clone...

Exploit for SQL Injection in Phpipam

CVE-2022-23046 The original discovery and manual PoC is from...

Code injection

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...

phpIPAM SQL注入漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A SQL injection vulnerability exists in PhpIPAM v1.4.4, which originates from an authenticated administrator user being able to insert SQL statements in the subnet parameter when searching for subnets via...