İçeriğe atla
Noroxi

phpipam kayıtları

phpipam üreticisine ait 52 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%25
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

52 kayıt
  • CVE-2019-16692
    42Planlayın

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    phpipam · phpipam22 Eyl 2019

  • CVE-2019-16693
    40Planlayın

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    phpipam · phpipam22 Eyl 2019

  • CVE-2019-16695
    40Planlayın

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used.

    KritikCVSS 9,8İstismar yokEPSS %2

    phpipam · phpipam22 Eyl 2019

  • CVE-2019-16694
    40Planlayın

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used.

    KritikCVSS 9,8İstismar yokEPSS %2

    phpipam · phpipam22 Eyl 2019

  • CVE-2019-16696
    40Planlayın

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used.

    KritikCVSS 9,8İstismar yokEPSS %2

    phpipam · phpipam22 Eyl 2019

  • CVE-2018-1000869
    40Planlayın

    phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection..

    KritikCVSS 9,8İstismar yokEPSS %2

    phpipam · phpipam20 Ara 2018

  • CVE-2022-41443
    39İzleyin

    phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    phpipam · phpipam3 Eki 2022

  • CVE-2022-23046
    36İzleyin

    PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/r

    YüksekCVSS 7,2Kavram kanıtıEPSS %25

    phpipam · phpipam19 Oca 2022

  • CVE-2020-7988
    35İzleyin

    An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4.

    YüksekCVSS 8,8İstismar yokEPSS %1

    phpipam · phpipam4 Mar 2020

  • CVE-2023-0678
    32İzleyin

    Missing Authorization in phpipam/phpipam

    OrtaCVSS 5,3Kavram kanıtıEPSS %37

    phpipam · phpipam4 Şub 2023

  • CVE-2023-41580
    30İzleyin

    Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-search-result.php.

    YüksekCVSS 7,5İstismar yokEPSS %1

    phpipam · phpipam2 Eki 2023

  • CVE-2024-10718
    30İzleyin

    Cookie without Secure attribute in phpipam/phpipam

    YüksekCVSS 7,5İstismar yokEPSS %0

    phpipam · phpipam20 Mar 2025

  • CVE-2023-1211
    29İzleyin

    SQL Injection in phpipam/phpipam

    YüksekCVSS 7,2Kavram kanıtıEPSS %3

    phpipam · phpipam6 Mar 2023

  • CVE-2024-41357
    28İzleyin

    phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.

    YüksekCVSS 7,1Kavram kanıtıEPSS %1

    phpipam · phpipam26 Tem 2024

  • CVE-2024-41353
    28İzleyin

    phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    phpipam · phpipam26 Tem 2024

  • CVE-2024-41354
    28İzleyin

    phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    phpipam · phpipam26 Tem 2024

  • CVE-2022-1225
    26İzleyin

    Incorrect Privilege Assignment in phpipam/phpipam

    OrtaCVSS 6,5İstismar yokEPSS %1

    phpipam · phpipam4 Nis 2022

  • CVE-2022-1224
    26İzleyin

    Improper Authorization in phpipam/phpipam

    OrtaCVSS 6,5İstismar yokEPSS %1

    phpipam · phpipam4 Nis 2022

  • CVE-2022-1223
    26İzleyin

    Incorrect Authorization in phpipam/phpipam

    OrtaCVSS 6,5İstismar yokEPSS %1

    phpipam · phpipam4 Nis 2022

  • CVE-2024-41355
    26İzleyin

    phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    phpipam · phpipam26 Tem 2024

  • CVE-2023-24657
    25İzleyin

    phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/po

    OrtaCVSS 6,1Kavram kanıtıEPSS %4

    phpipam · phpipam8 Mar 2023

  • CVE-2024-41358
    24İzleyin

    phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    phpipam · phpipam29 Ağu 2024

  • CVE-2023-0676
    24İzleyin

    Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    phpipam · phpipam4 Şub 2023

  • CVE-2021-35438
    24İzleyin

    phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator.

    OrtaCVSS 6,1İstismar yokEPSS %1

    phpipam · phpipam23 Haz 2021

  • CVE-2021-46426
    24İzleyin

    phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality.

    OrtaCVSS 6,1İstismar yokEPSS %1

    phpipam · phpipam25 Mar 2022