Skip to content
OpenAdvisories

Product · phpipam

phpipam/phpipam

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.5
    CVE-2024-10721

    Store XSS in phpipam/phpipam

    A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which can be executed in the context of other users who view the affecte…

    phpipam phpipam/phpipam
  • Low 3.5
    CVE-2024-10727

    Cross-Site Scripting (XSS) in phpipam/phpipam

    A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manne…

    phpipam phpipam/phpipam
  • Low 3.5
    CVE-2024-10722

    Stored Cross-site Scripting (XSS) in phpipam/phpipam

    A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to da…

    phpipam phpipam/phpipam
  • Low 2.4
    CVE-2024-10719

    Stored Cross-site Scripting (XSS) in phpipam/phpipam

    A stored cross-site scripting (XSS) vulnerability exists in phpipam version 1.5.2, specifically in the circuits options functionality. This vulnerability allows an attacker to inject malicious scripts via the 'option' parameter in the POST request to /phpipam…

    phpipam phpipam/phpipam
  • Low 3.5
    CVE-2024-10724

    Stored XSS in IPV6 Section in phpipam/phpipam

    A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address. This vulnerability allows an attacker to execute malicious code. The issue is …

    phpipam phpipam/phpipam
  • Low 3.5
    CVE-2024-10723

    Stored XSS in phpipam/phpipam

    A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the destination address field of the NAT tool, which can be executed when a user interact…

    phpipam phpipam/phpipam
  • Low 3.5
    CVE-2024-10725

    Stored Cross-site Scripting (XSS) in phpipam/phpipam

    A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which are then executed in the context of other users who view the affected page…

    phpipam phpipam/phpipam
  • Low 3.5
    CVE-2022-1226

    Cross-site Scripting (XSS) in phpipam/phpipam

    A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitrary JavaScript code in the browser of a victim. This vulnerability affects the import Data set feature via a spreadsheet file upload. The a…

    phpipam phpipam/phpipam
  • Low 2.4
    CVE-2023-0676

    Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

    Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.

    phpipam phpipam/phpipam