CVE-2020-7988

An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to more data and functionality. This issue exists due to the lack of a requirement to provide the old password, and the lac...

PT-2020-19900

Name of the Vulnerable Software and Affected Versions phpIPAM version 1.4 Description An issue was discovered in tools/pass-change/result.php, allowing CSRF to be used to change the password of any user or admin, escalate privileges, and gain access to more data and functionality. This issue exis...

CVE-2020-7988: Cross-Site Request Forgery (CSRF)

An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to more data and functionality. This issue exists due to the lack of a requirement to provide the old password, and the lac...