TI-2024-09932 CVE-2024-10718 · GHSA-mj67-2mvx-f778
Cookie without Secure attribute in phpipam/phpipam
Priority HIGH 72
In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set.
phpipam
Records57All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9
Exploited now
phpipam records in CISA KEVNo phpipam vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
57 records
TI-2023-22036 CVE-2023-41580 · GHSA-w44p-h466-6wfq
Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the…
Priority HIGH 72
Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-search-result.php.
TI-2023-01145 CVE-2023-1211 · GHSA-vmmw-985w-hrr3
SQL Injection in phpipam/phpipam
Priority HIGH 67
SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.
TI-2024-00724 CVE-2024-0787 · GHSA-h2wf-696m-6fj8
Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam
Priority HIGH 66
phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header.
TI-2024-27603 CVE-2024-41357 · GHSA-w986-c9ww-hwv3
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.
Priority MEDIUM 64
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.
TI-2024-27600 CVE-2024-41354 · GHSA-2565-9vww-cf73
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php
Priority MEDIUM 64
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php
TI-2024-27599 CVE-2024-41353 · GHSA-x5w5-hrw3-ch29
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php
Priority MEDIUM 64
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php
TI-2024-27601 CVE-2024-41355 · GHSA-2g3f-rmh8-cj3f
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php.
Priority MEDIUM 62
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php.
TI-2024-09941 CVE-2024-10727 · GHSA-6pvw-p9fg-rwxj
Cross-Site Scripting (XSS) in phpipam/phpipam
Priority MEDIUM 60
A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0.
TI-2024-09934 CVE-2024-10720 · GHSA-qgm6-wj98-3qh4
Stored Cross-site Scripting (XSS) in phpipam/phpipam
Priority MEDIUM 60
A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2.
TI-2023-10246 CVE-2023-24657 · GHSA-m5cp-j2v2-pcm9
phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS)…
Priority MEDIUM 60
phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php.
TI-2023-00641 CVE-2023-0677 · GHSA-wx4g-2jhx-899v
Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
Priority MEDIUM 60
Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1.
TI-2023-00640 CVE-2023-0676 · GHSA-f6p2-2572-4pjp
Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
Priority MEDIUM 60
Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.
TI-2024-09939 CVE-2024-10725 · GHSA-8f78-f6p2-mjw7
Stored Cross-site Scripting (XSS) in phpipam/phpipam
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2.
TI-2024-09938 CVE-2024-10724 · GHSA-h5h7-gc2g-vq79
Stored XSS in IPV6 Section in phpipam/phpipam
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address.
TI-2024-09937 CVE-2024-10723 · GHSA-prx2-6cc4-7qq5
Stored XSS in phpipam/phpipam
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2.
TI-2024-09936 CVE-2024-10722 · GHSA-vh85-qfmh-23mf
Stored Cross-site Scripting (XSS) in phpipam/phpipam
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2.
TI-2024-09935 CVE-2024-10721 · GHSA-85ff-r9hw-4grc
Store XSS in phpipam/phpipam
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2.
TI-2024-09933 CVE-2024-10719 · GHSA-726r-vfh2-3vvj
Stored Cross-site Scripting (XSS) in phpipam/phpipam
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability exists in phpipam version 1.5.2, specifically in the circuits options functionality.
TI-2026-70699 CVE-2026-108720 · GHSA-rv8q-2v6x-vpgr
Missing authorization in phpIPAM exposes restricted subnets
Priority MEDIUM 57
phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::check_per…
TI-2023-00642 CVE-2023-0678 · GHSA-gwf4-852r-f46g
Missing Authorization in phpipam/phpipam
Priority MEDIUM 57
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1.
TI-2024-27602 CVE-2024-41356 · GHSA-r577-p9f2-v43j
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php.
Priority MEDIUM 55
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php.
TI-2023-04570 CVE-2023-4965 · GHSA-rrqv-682x-j9m7
phpipam Header redirect
Priority MEDIUM 55
A vulnerability was found in phpipam 1.5.1.
TI-2023-01146 CVE-2023-1212 · GHSA-whpq-fm42-qw57
Cross-site Scripting (XSS) - Stored in phpipam/phpipam
Priority MEDIUM 55
Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.
TI-2022-01113 CVE-2022-1226 · GHSA-fpg3-c7pp-9cgh
Cross-site Scripting (XSS) in phpipam/phpipam
Priority MEDIUM 55
A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitrary JavaScript code in the browser of a victim.