← Back

Phpipam

phpipam

Vendor: Phpipam • 52 CVEs

CVEs (52)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-16695
1Phpipam
1Phpipam
Jun 17, 2026
Sep 22, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used.
CVE-2019-16694
1Phpipam
1Phpipam
Jun 17, 2026
Sep 22, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used.
CVE-2019-16693
1Phpipam
1Phpipam
Jun 17, 2026
Sep 22, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.
CVE-2019-16692
1Phpipam
1Phpipam
Jun 17, 2026
Sep 22, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.
CVE-2019-1000010
1Phpipam
1Phpipam
Jun 17, 2026
Feb 4, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack appears to be exploitable via victim visit...Show more
phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack appears to be exploitable via victim visits link crafted by an attacker. This vulnerability appears to have been fixed in 1.4.Show less
CVE-2018-1000870
1Phpipam
1Phpipam
Nov 21, 2024
Dec 20, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme...Show more
PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. Admin(Victim) views user in admin-panel and gets exploited.. This vulnerability appears to have been fixed in 1.4.Show less
CVE-2018-1000869
1Phpipam
1Phpipam
Nov 21, 2024
Dec 20, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to be exploitable via Rough user, exploiting the vulnerability to access i...Show more
phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to be exploitable via Rough user, exploiting the vulnerability to access information he/she does not have access to.. This vulnerability appears to have been fixed in 1.4.Show less
CVE-2018-1000860
1Phpipam
1Phpipam
Nov 21, 2024
Dec 20, 2018
N/A· v4
4.7 MEDIUM· v3
2.6 LOW· v2
phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page encapsulated in single quotes. Editing the val...Show more
phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page encapsulated in single quotes. Editing the value of the cookie to r5zkh'><script>alert(1)</script>quqtl exploits an XSS vulnerability. that can result in Arbitrary code executes in victims browser.. This attack appear to be exploitable via Needs to be chained with another exploit that allows an attacker to set or modify a cookie for the phpIPAM instance's domain..Show less
CVE-2018-10329
1Phpipam
1Phpipam
Nov 21, 2024
Apr 24, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter.
CVE-2017-15640
1Phpipam
1Phpipam
Nov 21, 2024
Apr 21, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter.
CVE-2017-6481
1Phpipam
1Phpipam
May 13, 2026
Mar 5, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (instructions in app/admin/instructions/pr...Show more
Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.Show less
CVE-2015-6529
1Phpipam
1Phpipam
May 6, 2026
Aug 20, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to site/error.php or (2) ip parameter to site/tools/searc...Show more
Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to site/error.php or (2) ip parameter to site/tools/searchResults.php.Show less