CVE-2019-16694

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used...

CVE-2019-16694

CVE-2019-16694 affects phpIPAM 1.4 and is an SQL injection vulnerability in the admin function: the table parameter of app/admin/custom-fields/edit-result.php when action=add is used. Multiple sources (NVD, OSV, RH) document this vulnerability and list it as high/critical risk (CVSS v3.1: 9.8, NE...