521 matches found
PT-2023-31278 · Phpipam · Phpipam
Name of the Vulnerable Software and Affected Versions: phpipam version 1.5.1 Description: A vulnerability was found in the component Header Handler of phpipam. The manipulation of the argument X-Forwarded-Host leads to open redirect. This issue can be exploited remotely. Recommendations: For...
phpIPAM Input Validation Error Vulnerability
phpIPAM is an open source PHP and MySQL based IP address management application IPAM. An input validation error vulnerability exists in phpIPAM version 1.5.1, which stems from an open redirection issue with the parameter X-Forwarded-Host...
The vulnerability in the script of the web application for managing IP addresses, app/admin/custom-fields/edit-result.php, allows a violator to execute arbitrary SQL commands.
The vulnerability in the script app/admin/custom-fields/edit-result.php of the IP address management web application, developed with PHPIPAM, relates to the lack of measures taken to protect the SQL query structure during the processing of user fields with the parameter fieldType=set&fieldSize='1...
phpIPAM < 1.5.2 XSS Vulnerability
phpIPAM is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam";...
CVE-2023-24657
phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...
Cross site scripting
phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...
PT-2023-19730 · Phpipam · Phpipam
Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability can be exploited via the closeClass parameter at the "/subnet-masks/popup.php" API endpoint. Recommendations: For...
CVE-2023-24657
phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...
phpIPAM 跨站脚本漏洞
phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A security vulnerability exists in phpIPAM version 1.6, which was discovered to contain a Reflected Cross-Site Scripting XSS vulnerability via the closeClass parameter of /subnet-masks/popup.php...
CVE-2023-24657
phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...
phpIPAM < 1.5.2 Multiple Vulnerabilities
phpIPAM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam"; ifdescription...
CVE-2023-24657
phpIPAM 1.6 contains a reflected Cross‑Site Scripting (XSS) vulnerability via the closeClass parameter in /subnet-masks/popup.php. The issue allows injecting arbitrary script into a victim’s browser, potentially exposing cookies or enabling further attacks. The CVE entry (CVE-2023-24657) is rated...
CVE-2023-24657
phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...
CVE-2023-1211
SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2...
CVE-2023-1211
SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2...
CVE-2023-1212
Cross-site Scripting XSS - Stored in GitHub repository phpipam/phpipam prior to v1.5.2...
Sql injection
SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2...
phpIPAM SQL注入漏洞
phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A SQL injection vulnerability exists in phpIPAM versions prior to 1.5.2. An attacker exploits this vulnerability to perform SQL injection attacks...