15 matches found
phpipam_1.4.4
CVE-2022-23046 phpIPAM 1.4.4 - SQL 注入 phpIPAM v1.4.4 允许已认证的管理员用户通过 app/admin/routing/edit-bgp-mapping-search.php 搜索子网时，在子网参数中注入 SQL 语句。该项目目前会输出数据库信息和主机版本信息。它还可以尝试读取文件并写入服务器。 开始入门 执行程序 检查是否存在漏洞。 root@kitploit: python3 phpipam1.4.4.py -t http://phpipam.com/ -u username -p password 测试文件读取...
CVE-2022-23046
CVE-2022-23046 The original discovery and manual PoC is from Fluidattacks: PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php. This PoC executes some easy SQLi to fetch info...
CVE-2022-23046
CVE-2022-23046 PhpIPAM v1.4.4 允许已验证的管理员用户在通过 app/admin/routing/edit-bgp-mapping-search.php 搜索子网时，向 "subnet" 参数注入 SQL 语句。 安装 1. 构建 root@kitploit: git clone https://github.com/dnr6419/CVE-2022-23046.git cd CVE-2022-23046 && docker-compose up -d pip3or pip install -r requirements.txt python3or pytho...
CVE-2022-23046
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...
CVE-2025-6487
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been rated as critical. This issue affects the function formRoute of the file /boafrm/formRoute. The manipulation of the argument subnet leads to stack-based buffer overflow. The attack may be initiated remotely. The exploi...
Bohua NetDragon Firewall 注入漏洞
Bohua NetDragon Firewall is a firewall from Bohua. An injection vulnerability exists in Bohua NetDragon Firewall version 1.0, which stems from improper handling of the parameter subnet in the file /systemstatus/ipstatus.php, which could lead to command injection...
The vulnerability of the app/admin/routing/edit-bgp-mapping-search.php web application for managing IP addresses in phpipam allows a attacker to execute arbitrary SQL queries.
The vulnerability of the app/admin/routing/edit-bgp-mapping-search.php web application for managing IP addresses in phpipam lies in the lack of measures taken to protect the SQL query structure when processing the “subnet” parameter. Exploiting this vulnerability allows a malicious actor to execu...
Exploit for SQL Injection in Phpipam
CVE-2022-23046 The original discovery and manual PoC is from...
Code injection
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...
CVE-2022-23046
CVE-2022-23046 : PhpIPAM v1.4.4 enables an authenticated admin to inject SQL via the subnet parameter when searching in app/admin/routing/edit-bgp-mapping-search.php. Root cause is SQL injection reachable through the subnet field with authenticated access, potentially exposing database informatio...
CVE-2022-23046
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...
phpIPAM SQL注入漏洞
phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A SQL injection vulnerability exists in PhpIPAM v1.4.4, which originates from an authenticated administrator user being able to insert SQL statements in the subnet parameter when searching for subnets via...
TOTOLINK A3002RU System Command Injection Vulnerability (CNVD-2018-26645)
TOTOLINK A3002RU is a wireless router product from Gion Electronics TOTOLINK. A command injection vulnerability exists in formAliasIp in TOTOLINK A3002RU version 1.0.8. An attacker can exploit this vulnerability to execute system commands with the help of the 'subnet' POST parameter...
