CVE-2026-97818

The phpIPAM software, through version 1.8.3 , is vulnerable to an incorrect authorization flaw located in api/controllers/User.php. The issue specifically involves incorrect handling for `id==

EUVD-2026-86523

phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php...

CVE-2022-23046

CVE-2022-23046 PhpIPAM v1.4.4 允许已验证的管理员用户在通过 app/admin/routing/edit-bgp-mapping-search.php 搜索子网时，向 "subnet" 参数注入 SQL 语句。 安装 1. 构建 root@kitploit: git clone https://github.com/dnr6419/CVE-2022-23046.git cd CVE-2022-23046 && docker-compose up -d pip3or pip install -r requirements.txt python3or pytho...

CVE-2019-16692

CVE-2019-16692 针对 CVE-2019-16692 的利用代码，一个 phpIPAM 漏洞...

PHPIPAM <v1.5.1 - Missing Authorization

In phpIPAM 1.5.1, an unauthenticated user could download the list of high-usage IP subnets that contains sensitive information such as a subnet description, IP ranges, and usage rates via findfullsubnets.php endpoint. The bug lies in the fact that findfullsubnets.php does not verify if the user i...

phpIPAM 1.5.1 - Cross-site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1. id: CVE-2023-0676 info: name: phpIPAM 1.5.1 - Cross-site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5....

phpIPAM - 1.6 - Cross-Site Scripting

phpIPAM 1.6 contains a cross-site scripting vulnerability via the closeClass parameter at /subnet-masks/popup.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

CVE-2022-23046

CVE-2022-23046 PHPIPAM 1.4.4 - SQLi（已认证） 原始漏洞利用脚本可在此处找到 原始漏洞利用脚本作者： Rodolfo "Inc0gbyt3" Tavares 针对 CVE-2022-23046 的修改脚本 我在运行原始脚本时遇到了问题。于是根据我的使用场景对其进行了修改。 在完成 THM 实验房间 Ollie 的过程中使用。...

CVE-2022-23046

CVE-2022-23046 El descubrimiento original y el PoC manual provienen de Fluidattacks: PhpIPAM v1.4.4 permite a un usuario administrador autenticado inyectar sentencias SQL en el parámetro "subnet" al buscar una subred a través de app/admin/routing/edit-bgp-mapping-search.php. Este PoC ejecuta SQLi...

phpipam_1.4.4

CVE-2022-23046 phpIPAM 1.4.4 - Inyección SQL phpIPAM v1.4.4 permite a un usuario administrador autenticado inyectar sentencias SQL en el parámetro subnet mientras busca una subred a través de app/admin/routing/edit-bgp-mapping-search.php. Este proyecto actualmente imprime información de la base d...

the-token-was-a-row-number-cve-2026-67602-phpipam-rest-api-authentication-bypass

CVE-2026-67602 — phpIPAM 1.8.2 Bypass de Autenticación en la API REST Bypass de autenticación no autenticado en la API REST de phpIPAM, causado por una colisión de claves en la caché de objetos: la fila de la base de datos almacenada en caché al resolver el appid de una aplicación de API satisfac...

Exploit for CVE-2026-67602

CVE-2026-67602 — phpIPAM row id=2, appsecurity=sslcode 2...

CVE-2026-67602

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure object cache keying mechanism. The cache is keyed by lookup value alone without including the searched column, enabling an...

CVE-2026-67602

phpIPAM before 1.8.2 contains an authentication bypass in its REST API caused by an insecure object cache keying mechanism. The cache is keyed by lookup value alone without including the searched column, so an entry written during an app_id lookup can satisfy a subsequent app_code lookup. This al...

EUVD-2026-64889

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure object cache keying mechanism. The cache is keyed by lookup value alone without including the searched column, enabling an...

CVE-2026-67602 phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure object cache keying mechanism. The cache is keyed by lookup value alone without including the searched column, enabling an...

CVE-2026-67602 phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure object cache keying mechanism. The cache is keyed by lookup value alone without including the searched column, enabling an...

CVE-2026-67602 phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure object cache keying mechanism. The cache is keyed by lookup value alone without including the searched column, enabling an...

CVE-2026-67602: Use of Incorrectly-Resolved Name or Reference

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure object cache keying mechanism. The cache is keyed by lookup value alone without including the searched column, enabling an...

PT-2026-80888

Name of the Vulnerable Software and Affected Versions phpIPAM versions prior to 1.8.2 Description An authentication bypass exists in the REST API due to an insecure object cache keying mechanism. The cache uses only the lookup value as a key and fails to include the searched column. This allows a...