CVE-2018-1000860

phpipam version 1.3.2 and earlier contains a Cross Site Scripting XSS vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page encapsulated in single quotes. Editing the value of the cookie to r5zkh'quqtl exploits an XSS vulnerability. that can result ...

CVE-2018-1000860

CVE-2018-1000860 concerns phpIPAM quqtl) that may execute arbitrary code in a victim’s browser. This attack appears to be exploitable after an attacker can set or modify the phpIPAM instance’s cookie domain. The connected documents confirm the issue but do not specify a vendor-provided patch or f...