3 matches found
Exploit for SQL Injection in Phpipam
CVE-2022-23046 The original discovery and manual PoC is from...
7.2CVSS7.1AI score0.25243EPSS
SaveExploits7
Code injection
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...
6.5CVSS6.9AI score0.25243EPSS
SaveExploits7References3Affected Software1
CVE-2022-23046: Improper Neutralization of Special Elements used in an SQL Command
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...
7.2CVSS5.8AI score0.25243EPSS
SaveExploits7References2
20