PH
Product
phpipam
60
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 8High 10Medium 38Low 3
Watch
Add phpipam to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-41443 | 9.8 | Oct 3 | phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.php Affected: 1.5.0 |
| CVE-2019-16696 | 9.8 | Sep 22 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used Affected: through 1.4 |
| CVE-2019-16695 | 9.8 | Sep 22 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used Affected: through 1.4 |
| CVE-2019-16694 | 9.8 | Sep 22 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used Affected: through 1.4 |
| CVE-2019-16693 | 9.8 | Sep 22 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used Affected: through 1.4 |
| CVE-2019-16692 | 9.8 | Sep 22 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used Affected: through 1.4 |
| CVE-2018-1000869 | 9.8 | Dec 20 | phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection Affected: 1.3.2 |
| CVE-2026-67602 | 9.1 | Aug 24 | phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache Affected: before 1.8.2 |
Showing 8
