The vulnerability in the `app\admin\groups\edit-group.php` file of the PHPIPAM web application allows a attacker to perform XSS attacks.

The vulnerability in the app\admin\groups\edit-group.php file of the IP address management web application exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability in the script /app/tools/request-ip/index.php of the PHPIPAM IP management web application allows a attacker to execute XSS attacks.

The vulnerability in the app/tools/request-ip/index.php web application for IP address management via phpipam exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

The vulnerability in the `app\admin\groups\edit-group.php` file of the PHPIPAM web application allows a attacker to perform XSS attacks.

The vulnerability in the app\admin\groups\edit-group.php file of the IP address management web application exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

CVE-2024-41354

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/widgets/edit.php...

CVE-2024-41356

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...

CVE-2024-41357

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/powerDNS/record-edit.php...

CVE-2024-41355

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...

CVE-2024-41356

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...

phpIPAM 安全漏洞

phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from a cross-site scripting vulnerability contained in the appadmingroupsedit-group.php file...

CVE-2024-41354

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/widgets/edit.php...

CVE-2024-41356

The phpIPAM open-source IP address management suite (version 1.6 ) is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the appad irewall-zones ones-edit-network.php script. The root cause is identified as insufficient protection of the website structure. A remote attacker could exploi...

PT-2024-5308 · Phpipam · Phpipam

Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to a lack of protection for the web page structure in the phpipam web application for IP address management. This can be exploited by a remote attacker to conduct a cross-site scripting XS...

CVE-2024-41355

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...

CVE-2024-41354

phpIPAM version 1.6 is vulnerable to a Cross-Site Scripting (XSS) vulnerability located in the /app/admin/widgets/edit.php endpoint. The root cause is the insufficient protection of the web page structure , specifically involving the app/admin/groups/edit-group.php script. A remote attacker can e...

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

CVE-2024-41355

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...

PT-2024-5278 · Phpipam · Phpipam

Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It exists due to insufficient protection of the web page structure in the appadmingroupsedit-group.php script of the phpipam web application fo...

CVE-2024-41356

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...

CVE-2024-41357

The IP address management suite phpIPAM version 1.6 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /app/admin/powerDNS/record-edit.php endpoint. The root cause is a lack of security measures to protect the web page structure against improper neutralization of input during web page ...