CVE Browser

phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.

phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter

PHPIPAM Authenticated LFI

phpipam Section edit-result.php sql injection

Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructio…

phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The generate-mysql.php function, located in the…

phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts.

Store XSS in phpipam/phpipam

Cross-Site Scripting (XSS) in phpipam/phpipam

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Cookie without Secure attribute in phpipam/phpipam

Stored XSS in IPV6 Section in phpipam/phpipam

Stored XSS in phpipam/phpipam

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Cross-site Scripting (XSS) in phpipam/phpipam

Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php.

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php.

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php.

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php