CVE-2022-23046

CVE-2022-23046 A descoberta original e o PoC manual são da Fluidattacks: O PhpIPAM v1.4.4 permite que um usuário admin autenticado injete sentenças SQL no parâmetro "subnet" ao pesquisar uma sub-rede via app/admin/routing/edit-bgp-mapping-search.php. Este PoC executa alguns SQLi fáceis para obter...

phpIPAM SQL注入漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A SQL injection vulnerability exists in PhpIPAM v1.4.4, which originates from an authenticated administrator user being able to insert SQL statements in the subnet parameter when searching for subnets via...