CVE-2024-41357

CVE-2024-41357 affects phpIPAM version 1.6, with a Cross Site Scripting (XSS) vulnerability in the /app/admin/powerDNS/record-edit.php endpoint. The issue is confirmed across multiple feeds (NVD, Red Hat advisories, OSV, Exploit-DB) and relates to untrusted input handling in that file. The availa...

CVE-2024-41354

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/widgets/edit.php...

CVE-2024-41356

CVE-2024-41356 affects phpipam 1.6 with a Cross-Site Scripting (XSS) vulnerability in the file path app/admin/firewall-zones/zones-edit-network.php. Publicly available details confirm the affected product and the vulnerable component, and describe the impact as XSS. CVSS 3.1 vector: CVSS:3.1/AV:N...

The vulnerability of the /users/ad-search-result.php web application for phpipam allows a violator to disclose protected information.

The vulnerability of the /users/ad-search-result.php web application for managing IP addresses in phpipam exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

CVE-2022-3845 phpipam Import Preview import-load-data.php cross site scripting

A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be...

phpIPAM 安全漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A security vulnerability exists in versions prior to phpipam 1.4.6 that stems from incorrect authorization in the application...

phpIPAM 访问控制错误漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. An access control error vulnerability exists in versions prior to phpipam 1.4.6. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

PT-2022-12701 · Phpipam · Phpipam

Name of the Vulnerable Software and Affected Versions: phpIPAM version 1.4.4 Description: The issue allows for Reflected XSS and CSRF attacks via the "app/admin/subnets/find free section subnets.php" endpoint of the subnets functionality. Recommendations: For phpIPAM version 1.4.4, consider...

phpIPAM 跨站脚本漏洞

phpIPAM is an open source PHP and MySQL-based IP address management application IPAM. phpIPAM in v1.4.4 is vulnerable to a cross-site scripting vulnerability that stems from a lack of user-supplied data and output data validation filtering in the Site title parameter when updating site settings. ...