CVE-2019-16695

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used...

CVE-2019-16695

CVE-2019-16695 affects phpIPAM 1.4, where SQL injection can be triggered via the app/admin/custom-fields/filter.php table parameter when action=add is used. The vulnerability is documented with high/critical impact (CVSS metrics: CVSSv3.1 base score 9.8; CVSSv2 base 7.5). Exploitation details, af...