Browse CVEs

MEDIUM 6.1 CVE-2025-61078 Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the … Phpipam Mitigation only Fix from $1,6002025-12-09 HIGH 7.1 CVE-2024-41353 phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php Phpipam No fix yet Fix from $1,9502024-07-26 HIGH 7.1 CVE-2024-41354 phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php Phpipam No fix yet Fix from $1,9502024-07-26 HIGH 7.1 CVE-2024-41357 phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php. Phpipam No fix yet Fix from $1,9502024-07-26 MEDIUM 6.5 CVE-2024-41355 phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php. Phpipam No fix yet Fix from $1,6002024-07-26 CRITICAL 9.8 CVE-2022-41443 phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.php. Phpipam No fix yet Fix from $2,3002022-10-03 HIGH 7.2 CVE-2022-23046EPSS 25% PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/ed… Phpipam No fix yet Fix from $1,9502022-01-19 HIGH 8.8 CVE-2020-7988 An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privil… Phpipam No fix yet Fix from $1,9502020-03-04 MEDIUM 6.1 CVE-2018-10329 app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter. Phpipam Mitigation only Fix from $1,6002018-04-24