15 matches found
phpipam_1.4.4
CVE-2022-23046 phpIPAM 1.4.4 - SQL Injection phpIPAM v1.4.4 erlaubt es einem authentifizierten Admin-Benutzer, SQL-Befehle in den Subnet-Parameter einzuschleusen, während über app/admin/routing/edit-bgp-mapping-search.php nach einem Subnet gesucht wird. Dieses Projekt gibt derzeit...
CVE-2022-23046
CVE-2022-23046 A descoberta original e o PoC manual são da Fluidattacks: O PhpIPAM v1.4.4 permite que um usuário admin autenticado injete sentenças SQL no parâmetro "subnet" ao pesquisar uma sub-rede via app/admin/routing/edit-bgp-mapping-search.php. Este PoC executa alguns SQLi fáceis para obter...
CVE-2022-23046
CVE-2022-23046 PhpIPAM v1.4.4 erlaubt einem authentifizierten Admin-Benutzer, SQL-Anweisungen im Parameter "subnet" zu injizieren, während er ein Subnetz über app/admin/routing/edit-bgp-mapping-search.php sucht. Installation 1. Erstellen root@kitploit: git clone...
CVE-2022-23046
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...
CVE-2025-6487
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been rated as critical. This issue affects the function formRoute of the file /boafrm/formRoute. The manipulation of the argument subnet leads to stack-based buffer overflow. The attack may be initiated remotely. The exploi...
Bohua NetDragon Firewall 注入漏洞
Bohua NetDragon Firewall is a firewall from Bohua. An injection vulnerability exists in Bohua NetDragon Firewall version 1.0, which stems from improper handling of the parameter subnet in the file /systemstatus/ipstatus.php, which could lead to command injection...
The vulnerability of the app/admin/routing/edit-bgp-mapping-search.php web application for managing IP addresses in phpipam allows a attacker to execute arbitrary SQL queries.
The vulnerability of the app/admin/routing/edit-bgp-mapping-search.php web application for managing IP addresses in phpipam lies in the lack of measures taken to protect the SQL query structure when processing the “subnet” parameter. Exploiting this vulnerability allows a malicious actor to execu...
Exploit for SQL Injection in Phpipam
CVE-2022-23046 The original discovery and manual PoC is from...
Code injection
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...
CVE-2022-23046
CVE-2022-23046 : PhpIPAM v1.4.4 enables an authenticated admin to inject SQL via the subnet parameter when searching in app/admin/routing/edit-bgp-mapping-search.php. Root cause is SQL injection reachable through the subnet field with authenticated access, potentially exposing database informatio...
CVE-2022-23046
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php...
phpIPAM SQL注入漏洞
phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A SQL injection vulnerability exists in PhpIPAM v1.4.4, which originates from an authenticated administrator user being able to insert SQL statements in the subnet parameter when searching for subnets via...
TOTOLINK A3002RU System Command Injection Vulnerability (CNVD-2018-26645)
TOTOLINK A3002RU is a wireless router product from Gion Electronics TOTOLINK. A command injection vulnerability exists in formAliasIp in TOTOLINK A3002RU version 1.0.8. An attacker can exploit this vulnerability to execute system commands with the help of the 'subnet' POST parameter...
