682 matches found
Sql injection
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...
CVE-2019-16692
CVE-2019-16692 — phpIPAM 1.4 SQL Injection is triggered via the app/admin/custom-fields/filter-result.php table parameter when action=add is used. The vulnerability is a SQL injection in that component, as detailed by multiple sources, including the NVD/OSV records and public exploit references (...
CVE-2019-16692
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used...
CVE-2019-16692
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used...
CVE-2019-16693
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...
CVE-2019-16693
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...
CVE-2019-16693
CVE-2019-16693 affects phpIPAM 1.4 and is a SQL injection in app/admin/custom-fields/order.php when action=add is used. The vulnerability allows an attacker to manipulate the table parameter to extract or modify data via a crafted request (e.g., POST to /app/admin/custom-fields/order.php with tab...
CVE-2019-16694
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used...
CVE-2019-16694
CVE-2019-16694 affects phpIPAM 1.4 and is an SQL injection vulnerability in the admin function: the table parameter of app/admin/custom-fields/edit-result.php when action=add is used. Multiple sources (NVD, OSV, RH) document this vulnerability and list it as high/critical risk (CVSS v3.1: 9.8, NE...
CVE-2019-16694
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used...
CVE-2019-16695
CVE-2019-16695 affects phpIPAM 1.4, where SQL injection can be triggered via the app/admin/custom-fields/filter.php table parameter when action=add is used. The vulnerability is documented with high/critical impact (CVSS metrics: CVSSv3.1 base score 9.8; CVSSv2 base 7.5). Exploitation details, af...
CVE-2019-16695
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used...
CVE-2019-16695
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used...
CVE-2019-16696
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...
CVE-2019-16696
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...
CVE-2019-16696
CVE-2019-16696 affects phpIPAM 1.4, where an SQL injection is possible via the app/admin/custom-fields/edit.php table parameter when action=add is used. The vulnerability is documented across multiple sources (NVD entry and Red Hat advisory) with a high/severe impact, including potential unauthor...
CVE-2019-16692: Improper Neutralization of Special Elements used in an SQL Command
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used...
CVE-2019-16695: Improper Neutralization of Special Elements used in an SQL Command
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used...
CVE-2019-16694: Improper Neutralization of Special Elements used in an SQL Command
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used...
CVE-2019-16696: Improper Neutralization of Special Elements used in an SQL Command
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...