PT-2017-17098

Name of the Vulnerable Software and Affected Versions phpipam version 1.2 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerab...

CVE-2017-6481: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php. An attacker...