Skip to content
OpenAdvisories

Vendor

phpipam

25 known vulnerabilities.

Products

phpipam/phpipam 19 phpIPAM 6
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.6
    CVE-2026-97818

    phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.

    phpipam phpIPAM
  • High 7.5
    CVE-2026-75105

    phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter

    phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issued for. In app/temp_share/index.php and app/temp_share/address.php, when the share type is 'subnets', the subnetId parameter is used direct…

    phpipam phpIPAM
  • High 8.2
    CVE-2024-10720

    Stored Cross-site Scripting (XSS) in phpipam/phpipam

    A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability occurs in the 'Device Management' section under 'Administration' where an attacker can inject malicious scripts into the 'Name' and 'Description' fiel…

    phpipam phpipam/phpipam
  • High 7.2
    CVE-2023-1211 Public exploit

    SQL Injection in phpipam/phpipam

    SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.

    phpipam phpipam/phpipam
  • High 7.5
    CVE-2023-0678 EPSS 37%

    Missing Authorization in phpipam/phpipam

    Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1.

    phpipam phpipam/phpipam