CVE-2023-1211

CVE-2023-1211 describes a SQL injection in phpIPAM (phpipam/phpipam) prior to version 1.5.2. Public references indicate the vulnerability resides in the admin area (for example, /app/admin/custom-fields/edit-result.php) and can be exploited via crafted POST data to perform arbitrary SQL commands ...