521 matches found
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
phpIPAM 安全漏洞
phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from the presence of a cross-site scripting XSS vulnerability via appadminimport-exportimport-load-data.php...
CVE-2024-41358
CVE-2024-41358 affects phpIPAM 1.6. The vulnerability is a Cross-Site Scripting (XSS) issue in the import path app/admin/import-export/import-load-data.php. Root cause details are not provided in the documents beyond the XSS description. Potential impact is reflected as low confidentiality and in...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
PT-2024-29371
Name of the Vulnerable Software and Affected Versions phpipam version 1.6 Description The issue is a Cross Site Scripting XSS vulnerability. It occurs through the appadminimport-exportimport-load-data.php file. This allows for potential malicious script execution. Recommendations For phpipam...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
The vulnerability in the web application for managing IP addresses, phpipam’s /app/admin/powerDNS/record-edit.php script, allows a attacker to execute XSS attacks.
The vulnerability in the web application for managing IP addresses, /app/admin/powerDNS/record-edit.php, exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
The vulnerability in the `app\admin\groups\edit-group.php` file of the PHPIPAM web application allows a attacker to perform XSS attacks.
The vulnerability in the app\admin\groups\edit-group.php file of the IP address management web application exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability in the script /app/tools/request-ip/index.php of the PHPIPAM IP management web application allows a attacker to execute XSS attacks.
The vulnerability in the app/tools/request-ip/index.php web application for IP address management via phpipam exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
The vulnerability in the `app\admin\groups\edit-group.php` file of the PHPIPAM web application allows a attacker to perform XSS attacks.
The vulnerability in the app\admin\groups\edit-group.php file of the IP address management web application exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
CVE-2024-41353
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...
CVE-2024-41354
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/widgets/edit.php...
CVE-2024-41356
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...
CVE-2024-41357
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/powerDNS/record-edit.php...
CVE-2024-41355
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...
CVE-2024-41354
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via the /app/admin/widgets/edit.php endpoint. The issue is described across multiple sources (CVE-2024-41354 in various feeds); no official patch/version fix is disclosed in the provided documents. The vulnerability enables XSS in the widget...
CVE-2024-41357
CVE-2024-41357 affects phpIPAM version 1.6, with a Cross Site Scripting (XSS) vulnerability in the /app/admin/powerDNS/record-edit.php endpoint. The issue is confirmed across multiple feeds (NVD, Red Hat advisories, OSV, Exploit-DB) and relates to untrusted input handling in that file. The availa...
PT-2024-5308 · Phpipam · Phpipam
Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to a lack of protection for the web page structure in the phpipam web application for IP address management. This can be exploited by a remote attacker to conduct a cross-site scripting XS...