Skip to content
OpenAdvisories

Vendor

phpipam

25 known vulnerabilities.

Products

phpipam/phpipam 19 phpIPAM 6
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-108720

    phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

    phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::check_permission. Attackers can open customer ob…

    phpipam phpIPAM
  • Medium 5.4
    CVE-2024-55093

    phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts.

    phpipam phpIPAM
  • Medium 5.3
    CVE-2024-10718

    Cookie without Secure attribute in phpipam/phpipam

    In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed …

    phpipam phpipam/phpipam
  • Medium 5.3
    CVE-2024-0787

    Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam

    phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header. The issue lies in the 'get_user_ip()' function in 'class.Common.php' at lines 1044 and…

    phpipam phpipam/phpipam
  • Medium 5.9
    CVE-2023-1212

    Cross-site Scripting (XSS) - Stored in phpipam/phpipam

    Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.

    phpipam phpipam/phpipam
  • Medium 4.4
    CVE-2023-0677

    Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

    Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1.

    phpipam phpipam/phpipam
  • Medium 6.5
    CVE-2022-1225

    Incorrect Privilege Assignment in phpipam/phpipam

    Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6.

    phpipam phpipam/phpipam
  • Medium 6.5
    CVE-2022-1223

    Incorrect Authorization in phpipam/phpipam

    Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.

    phpipam phpipam/phpipam
  • Medium 6.5
    CVE-2022-1224

    Improper Authorization in phpipam/phpipam

    Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.

    phpipam phpipam/phpipam