CVE-2026-108720

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::checkpermission. Attackers can open customer objects.php, single-location.php or...

CVE-2026-108720

Versions of phpIPAM through 1.8.3 are vulnerable to a missing authorization flaw (CWE-862). The issue occurs because the customer, location, and NAT pages fail to execute the Subnets::check_permission function. This allows authenticated low-privilege users to access restricted sections by opening...

EUVD-2026-96994

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::checkpermission. Attackers can open customer objects.php, single-location.php or...

CVE-2026-108720

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::checkpermission. Attackers can open customer objects.php, single-location.php or...

CVE-2026-108720 phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::checkpermission. Attackers can open customer objects.php, single-location.php or...

CVE-2026-108720 phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::checkpermission. Attackers can open customer objects.php, single-location.php or...

PT-2026-110123

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::check permission. Attackers can open customer objects.php, single-location.php or nat...

CVE-2026-108720: Missing Authorization

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::checkpermission. Attackers can open customer objects.php, single-location.php or...

EUVD-2017-6035

Malware in sbrugna...

movietimecars.com XSS vulnerability

Open Bug Bounty ID: OBB-609389 Description| Value ---|--- Affected Website:| movietimecars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site scripting

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

CVE-2017-14534

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

CVE-2017-14534: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

PT-2017-13512

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description A Cross Site Scripting XSS issue exists, related to the PATH INFO to the "location.php" endpoint, and is connected to the PHP SELF variable. Recommendations For NexusPHP version 1.5.beta5.2012070...

pokolokochildcare.com XSS vulnerability

Vulnerable URL: http://www.pokolokochildcare.com/location.php?setlocation=1/-///'/"//--...

CVE-2013-5957: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL commands via the value parameter to 1 ajax/jqState or 2 ajax/jqcounty...

PT-2013-5882

Name of the Vulnerable Software and Affected Versions CiviCRM versions prior to 4.2.12 CiviCRM versions 4.3.x prior to 4.3.7 CiviCRM versions 4.4.x prior to 4.4.beta4 Description The issue allows remote attackers to execute arbitrary SQL commands via the value parameter to 1 "ajax/jqState" or 2...

Sql injection

SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter...

CVE-2010-4942

The CVE-2010-4942 entry describes an SQL injection in the eCal module’s location.php for E-Xoopport Samsara 3.1 and earlier, exploitable via the lid parameter. Affected component: location.php in the eCal module of Samsara 3.1 and older. Root cause: unsafely constructed SQL commands through lid, ...

CVE-2010-4942: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter...