Privilege escalation

Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6...

CVE-2022-1225

CVE-2022-1225 affects phpIPAM prior to 1.4.6, where an incorrect privilege assignment could allow a normal user to access export endpoints (e.g., generate-xls.php, generate-hosts.php, generate-mysql.php) and leak sensitive data. The connected Huntr entry details real-world paths and impact, indic...

CVE-2022-1225 Incorrect Privilege Assignment in phpipam/phpipam

Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6...

CVE-2022-1225 Incorrect Privilege Assignment in phpipam/phpipam

Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6...

CVE-2022-1223

CVE-2022-1223 refers to an incorrect authorization issue in the phpIPAM project before version 1.4.6. The available records consistently describe an access-control flaw in phpIPAM’s GitHub repository leading to potential exposure of subnet data due to improper permission checks. The vulnerability...

CVE-2022-1223 Incorrect Authorization in phpipam/phpipam

Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...

CVE-2022-1223 Incorrect Authorization in phpipam/phpipam

Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...

CVE-2022-1224

CVE-2022-1224 affects phpIPAM prior to 1.4.6 and is described as an Improper Authorization vulnerability in the GitHub repository phpipam/phpipam. Multiple sources (NVD, Red Hat, CVE lists, and related advisories) corroborate that an insufficient authorization check allows access to potentially r...

CVE-2022-1224 Improper Authorization in phpipam/phpipam

Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...

CVE-2022-1224 Improper Authorization in phpipam/phpipam

Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...

phpIPAM 安全漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A security vulnerability exists in versions prior to phpipam 1.4.6 that stems from incorrect authorization in the application...

phpIPAM 安全漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A security vulnerability exists in versions prior to phpipam 1.4.6 that stems from incorrect privilege assignment in the application...

phpIPAM 访问控制错误漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. An access control error vulnerability exists in versions prior to phpipam 1.4.6. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

CVE-2021-46426

phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/findfreesectionsubnets.php of the subnets functionality...

CVE-2021-46426

phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/findfreesectionsubnets.php of the subnets functionality...

CVE-2021-46426

phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/findfreesectionsubnets.php of the subnets functionality...

Cross site scripting

phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/findfreesectionsubnets.php of the subnets functionality...

CVE-2021-46426

phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/findfreesectionsubnets.php of the subnets functionality...

CVE-2021-46426

PHPIPAM 1.4.4 is vulnerable to Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php. The root cause is improper input handling in the subnets endpoint, enabling XSS and CSRF (CVSSv3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N; base 6.1). Exploitation details are not provided in t...

phpIPAM 跨站脚本漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A security vulnerability exists in phpIPAM version 1.4.4, which stems from a vulnerability in phpIPAM version 1.4.4 that allows a reflective cross-site scripting attack and cross-site request forgery via the...