Skip to content
OpenAdvisories

Product · phpipam

phpipam/phpipam

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-10718

    Cookie without Secure attribute in phpipam/phpipam

    In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed …

    phpipam phpipam/phpipam
  • Medium 5.3
    CVE-2024-0787

    Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam

    phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header. The issue lies in the 'get_user_ip()' function in 'class.Common.php' at lines 1044 and…

    phpipam phpipam/phpipam
  • Medium 5.9
    CVE-2023-1212

    Cross-site Scripting (XSS) - Stored in phpipam/phpipam

    Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.

    phpipam phpipam/phpipam
  • Medium 4.4
    CVE-2023-0677

    Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

    Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1.

    phpipam phpipam/phpipam
  • Medium 6.5
    CVE-2022-1225

    Incorrect Privilege Assignment in phpipam/phpipam

    Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6.

    phpipam phpipam/phpipam
  • Medium 6.5
    CVE-2022-1223

    Incorrect Authorization in phpipam/phpipam

    Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.

    phpipam phpipam/phpipam
  • Medium 6.5
    CVE-2022-1224

    Improper Authorization in phpipam/phpipam

    Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.

    phpipam phpipam/phpipam