CVE-2018-10329

The CVE-2018-10329 entry concerns phpIPAM 1.3.1, where the file app/tools/mac-lookup/index.php is vulnerable to a Reflected XSS via the mac parameter in /tools/mac-lookup/. The connected Red Hat, NVD, OSV, and CVE records corroborate this description. What is affected: the phpIPAM web application...

phpIPAM cross-site scripting vulnerability (CNVD-2018-08575)

phpIPAM is a set of open source PHP and MySQL based IP address management application IPAM. A cross-site scripting vulnerability exists in the app/tools/mac-lookup/index.php file in phpIPAM version 1.3.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with...

CVE-2018-10329: Improper Neutralization of Input During Web Page Generation

app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter...

CVE-2017-15640

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

Code injection

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

CVE-2017-15640

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

CVE-2017-15640

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

CVE-2017-15640

CVE-2017-15640 affects phpIPAM

CVE-2017-15640: Improper Neutralization of Input During Web Page Generation

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

phpIPAM < 1.2 Multiple XSS Vulnerabilities

phpIPAM is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpIPAM <= 1.2.1 Multiple XSS Vulnerabilities

phpIPAM is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-6481

Multiple Cross-Site Scripting XSS issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php. An attacker...

Cross site scripting

Multiple Cross-Site Scripting XSS issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php. An attacker...

CVE-2017-6481

Multiple Cross-Site Scripting XSS issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php. An attacker...

CVE-2017-6481

PHPIPAM 1.2 (and

CVE-2017-6481

Multiple Cross-Site Scripting XSS issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php. An attacker...

CVE-2017-6481: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php. An attacker...

Security fix for the ALT Linux 9 package phpipam version 1.27.002-alt1

Jan. 10, 2017 Alexey Shabalin 1.27.002-alt1 - git snapshot of master branch d55883ff28a3cf347f18e0cc717cf64b7556706a - update PHPMailer to 5.2.22 fixed CVE-2017-5223...

PT-2023-2058

Name of the Vulnerable Software and Affected Versions phpipam versions prior to 1.5.2 Description The issue is related to a lack of protection against SQL query structure manipulation in the app/admin/custom-fields/edit-result.php script of the phpipam web application for IP address management...

PT-2022-24411 · Phpipam +1 · Phpipam +1

Name of the Vulnerable Software and Affected Versions: phpipam versions prior to 1.5.0 Description: A vulnerability has been found in phpipam, allowing for cross site scripting through the manipulation of an unknown functionality in the file app/admin/import-export/import-load-data.php of the...