Lucene search
+L

7 matches found

NVD
NVD
•added 2025/03/20 10:15 a.m.•23 views

CVE-2024-10722

A stored cross-site scripting XSS vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distributi...

5.4CVSS0.00343EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/03/20 10:10 a.m.•26 views

CVE-2024-10722 Stored Cross-site Scripting (XSS) in phpipam/phpipam

A stored cross-site scripting XSS vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distributi...

3.5CVSS0.00343EPSS
SaveExploits1References2
CVE
CVE
•added 2025/03/20 10:10 a.m.•87 views

CVE-2024-10722

The CVE-2024-10722 entry concerns phpIPAM (phpipam/phpipam) version 1.5.2, with a stored XSS vulnerability in the Description field of custom fields under IP RELATED MANAGEMENT. The root cause is an input handling issue that allows injection of malicious scripts, leading to potential data theft, ...

5.4CVSS5.5AI score0.00343EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2025/03/20 10:10 a.m.•6 views

CVE-2024-10722

A stored cross-site scripting XSS vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distributi...

5.4CVSS0.00343EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•20 views

phpIPAM 跨站脚本漏洞

phpIPAM is the phpIPAM open source set of open source PHP and MySQL based IP address management applications IPAM. A cross-site scripting vulnerability exists in phpIPAM version 1.5.2, which stems from a stored cross-site scripting vulnerability in the Description field of the custom field in the...

5.4CVSS4.3AI score0.00343EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•7 views

CVE-2024-10722: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distributi...

5.4CVSS5.5AI score0.00343EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•6 views

PT-2025-12059

Name of the Vulnerable Software and Affected Versions phpipam/phpipam version 1.5.2 phpipam/phpipam versions prior to 1.7.0 Description A stored cross-site scripting XSS issue exists, allowing attackers to inject malicious scripts into the Description field of custom fields in the "IP RELATED...

5.4CVSS0.00343EPSS
SaveExploits1References8
Rows per page
Query Builder