HOMEVULNERABILITIESVENDORSPhpipam

PhpipamCVEs & Vulnerabilities

52 CVEs affecting Phpipam products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

52 CVEs→ All vendors

Most Affected Products

phpipam 52
CVE-2018-10329MEDIUM

app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter.

24 Apr 2018
6.1
CVSS
CVE-2017-15640MEDIUM

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter.

22 Apr 2018
5.4
CVSS
CVE-2017-6481MEDIUM

Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

5 Mar 2017
6.1
CVSS
CVE-2015-6529MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to site/error.php or (2) ip parameter to site/tools/searchResults.php.

20 Aug 2015
4.3
CVSS
← PrevPage 2 / 2Next →
← All Vendors·CVE Database