543 matches found
phpIPAM < 1.7.0 Multiple XSS Vulnerabilities
phpIPAM is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
phpIPAM 安全漏洞
phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from the presence of a cross-site scripting XSS vulnerability via appadminimport-exportimport-load-data.php...
CVE-2024-41358
CVE-2024-41358 affects phpIPAM 1.6. The vulnerability is a Cross-Site Scripting (XSS) issue in the import path app/admin/import-export/import-load-data.php. Root cause details are not provided in the documents beyond the XSS description. Potential impact is reflected as low confidentiality and in...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
PT-2024-29371
Name of the Vulnerable Software and Affected Versions phpipam version 1.6 Description The issue is a Cross Site Scripting XSS vulnerability. It occurs through the appadminimport-exportimport-load-data.php file. This allows for potential malicious script execution. Recommendations For phpipam...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
The vulnerability in the `app\admin\groups\edit-group.php` file of the PHPIPAM web application allows a attacker to perform XSS attacks.
The vulnerability in the app\admin\groups\edit-group.php file of the IP address management web application exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability in the web application for managing IP addresses, phpipam’s /app/admin/powerDNS/record-edit.php script, allows a attacker to execute XSS attacks.
The vulnerability in the web application for managing IP addresses, /app/admin/powerDNS/record-edit.php, exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
The vulnerability in the script /app/tools/request-ip/index.php of the PHPIPAM IP management web application allows a attacker to execute XSS attacks.
The vulnerability in the app/tools/request-ip/index.php web application for IP address management via phpipam exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
The vulnerability in the `app\admin\groups\edit-group.php` file of the PHPIPAM web application allows a attacker to perform XSS attacks.
The vulnerability in the app\admin\groups\edit-group.php file of the IP address management web application exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
CVE-2024-41353
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...
CVE-2024-41354
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/widgets/edit.php...
CVE-2024-41357
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/powerDNS/record-edit.php...
CVE-2024-41356
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...
CVE-2024-41355
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...
CVE-2024-41357
The IP address management suite phpIPAM version 1.6 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /app/admin/powerDNS/record-edit.php endpoint. The root cause is a lack of security measures to protect the web page structure against improper neutralization of input during web page ...