Browse CVEs

HIGH 8.8 CVE-2020-7988 An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privil… Phpipam No fix yet Fix from $1,9502020-03-04 CRITICAL 9.8 CVE-2019-16695 phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used. Phpipam after 1.4 Fix from $2,3002019-09-22 CRITICAL 9.8 CVE-2019-16696 phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used. Phpipam after 1.4 Fix from $2,3002019-09-22 CRITICAL 9.8 CVE-2019-16692EPSS 10% phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used. Phpipam after 1.4 Fix from $2,3002019-09-22 CRITICAL 9.8 CVE-2019-16693 phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used. Phpipam after 1.4 Fix from $2,3002019-09-22 CRITICAL 9.8 CVE-2019-16694 phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used. Phpipam after 1.4 Fix from $2,3002019-09-22 MEDIUM 6.1 CVE-2019-1000010 phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in … Phpipam after 1.3.2 Fix from $1,6002019-02-04 CRITICAL 9.8 CVE-2018-1000869 phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to … Phpipam Patch available Fix from $2,3002018-12-20 MEDIUM 5.4 CVE-2018-1000870 PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims b… Phpipam after 1.3.2 Fix from $1,6002018-12-20 MEDIUM 6.1 CVE-2018-10329 app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter. Phpipam Mitigation only Fix from $1,6002018-04-24 MEDIUM 5.4 CVE-2017-15640 app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter. Phpipam 1.3.1+ Fix from $1,6002018-04-21 MEDIUM 6.1 CVE-2017-6481 Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied … Phpipam after 1.2 Fix from $1,6002017-03-05