CVE-2015-6529

PHPIPAM 1.1.010 is affected by multiple XSS flaws due to unsanitized user input in site/error.php (section parameter) and site/tools/searchResults.php (ip parameter). Exploitation would allow injecting arbitrary scripts via these inputs, as reflected in multiple CVE references. A newer release ap...

CVE-2015-6529

Multiple cross-site scripting XSS vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the 1 section parameter to site/error.php or 2 ip parameter to site/tools/searchResults.php...

phpipam 1.1.010 Cross Site Scripting

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPIPAM0812.txt Vendor: ================================ phpipam.net Product: ====================================== phpipam-1.1.010 Vulnerability Type:...