phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php

Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6

Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6

Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6

Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the…

A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php

phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1

phpipam Import Preview import-load-data.php cross site scripting

phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality

phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator

phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser

app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter

Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2

phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address

A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2

A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2

A stored cross-site scripting (XSS) vulnerability exists in phpipam version 1.5.2, specifically in the circuits options functionality

PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1

A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitrary JavaScript code in the browser of a victim

A vulnerability was found in phpipam 1.5.1

Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings

phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget

phpipam Section edit-result.php sql injection

phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php

phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page…

phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting

phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages