EUVD-2025-202256

Cross-site scripting XSS vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the /app/admin/instructions/edit-result.php endpoint...

CVE-2025-60912

phpIPAM v1.7.3 is vulnerable to a Cross-Site Request Forgery (CSRF) in its database export functionality. Specifically, the generate-mysql.php function within the /app/admin/import-export/ endpoint lacks sufficient CSRF protection. This flaw allows a remote attacker to trigger the download of lar...