Login Request a demo
PH
Vendor
phpipam
1 product with CVEs on record
60
CVEs
0
On KEV
3
New 30D
Products
PH
phpipam
phpipam
9.8
60 CVEs0 on KEV3 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115982
New
PH
phpIPAM
Phpipam
4.3
0%
Oct 24phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting
CVE-2026-115981
New
PH
phpIPAM
Phpipam
2.4
0%
Oct 24phpIPAM index.php cross site scripting
CVE-2026-108720
PH
phpipam
phpipam
4.3
0%
Oct 11phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages
CVE-2026-97818
PH
phpIPAM
phpipam
8.6
0%
Sep 25phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php
CVE-2026-67602
PH
phpipam
phpipam
9.1
1%
Aug 24phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache
CVE-2026-75105
PH
phpipam
phpipam
7.5
0%
Aug 17phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter
CVE-2026-12194
PH
phpipam
phpipam
2.3
0%
Jul 4PHPIPAM Authenticated LFI
CVE-2026-4189
PH
phpipam
Phpipam
4.7
0%
Mar 15phpipam Section edit-result.php sql injection
CVE-2025-61078
PH
Phpipam
Phpipam
6.1
0%
Dec 9Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the…
CVE-2025-60912
PH
Phpipam
Phpipam
3.3
0%
Dec 8phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality
CVE-2024-55093
PH
Phpipam
Phpipam
4.7
0%
Mar 31phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts
CVE-2024-10727
PH
Phpipam
Phpipam
6.1
0%
Mar 20A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0
CVE-2024-10725
PH
Phpipam
Phpipam
5.4
0%
Mar 20A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2
CVE-2024-10724
PH
Phpipam
Phpipam
5.4
0%
Mar 20A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address
CVE-2024-10723
PH
Phpipam
Phpipam
5.4
0%
Mar 20A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2
CVE-2024-10722
PH
Phpipam
Phpipam
5.4
0%
Mar 20A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2
CVE-2024-10721
PH
Phpipam
Phpipam
5.4
0%
Mar 20A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2
CVE-2024-10720
PH
Phpipam
Phpipam
6.1
0%
Mar 20A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2
CVE-2024-10719
PH
Phpipam
Phpipam
5.4
0%
Mar 20A stored cross-site scripting (XSS) vulnerability exists in phpipam version 1.5.2, specifically in the circuits options functionality
CVE-2024-10718
PH
Phpipam
Phpipam
7.5
0%
Mar 20In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set
CVE-2024-0787
PH
Phpipam
Phpipam
5.9
0%
Nov 15phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header
CVE-2022-1226
PH
Phpipam
Phpipam
4.8
0%
Nov 15A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitrary JavaScript code in the browser of a victim
CVE-2024-41358
PH
Phpipam
Phpipam
6.1
2%
Aug 29phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php
CVE-2024-41354
PH
Phpipam
Phpipam
7.1
0%
Jul 26phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php
CVE-2024-41353
PH
Phpipam
Phpipam
7.1
0%
Jul 26phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php
CVE-2024-41357
PH
Phpipam
Phpipam
7.1
1%
Jul 26phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php
CVE-2024-41356
PH
Phpipam
Phpipam
4.7
0%
Jul 26phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php
CVE-2024-41355
PH
Phpipam
Phpipam
6.5
0%
Jul 26phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php
CVE-2023-41580
PH
Phpipam
Phpipam
7.5
1%
Oct 2Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-search-result.php
CVE-2023-4965
PH
Phpipam
Phpipam
4.8
1%
Sep 14A vulnerability was found in phpipam 1.5.1
CVE-2023-24657
PH
Phpipam
Phpipam
6.1
4%
Mar 8phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php
CVE-2023-1212
PH
Phpipam
Phpipam
4.8
0%
Mar 7Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2
CVE-2023-1211
PH
Phpipam
Phpipam
7.2
3%
Mar 7SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2
CVE-2023-0678
PH
Phpipam
Phpipam
5.3
37%
Feb 4Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1
CVE-2023-0677
PH
Phpipam
Phpipam
6.1
0%
Feb 4Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1
CVE-2023-0676
PH
Phpipam
Phpipam
6.1
2%
Feb 4Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1
CVE-2022-3845
PH
Phpipam
Phpipam
6.1
1%
Nov 2phpipam Import Preview import-load-data.php cross site scripting
CVE-2022-41443
PH
Phpipam
Phpipam
9.8
1%
Oct 3phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.php
CVE-2022-1225
PH
Phpipam
Phpipam
6.5
1%
Apr 4Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6
CVE-2022-1224
PH
Phpipam
Phpipam
6.5
1%
Apr 4Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6
CVE-2022-1223
PH
Phpipam
Phpipam
6.5
1%
Apr 4Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6
CVE-2021-46426
PH
Phpipam
Phpipam
6.1
1%
Mar 25phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality
CVE-2022-23046
PH
Phpipam
Phpipam
7.2
25%
Jan 19PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php
CVE-2022-23045
PH
Phpipam
Phpipam
4.8
1%
Jan 19PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings
CVE-2021-35438
PH
Phpipam
Phpipam
6.1
1%
Jun 23phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator
CVE-2020-13225
PH
Phpipam
Phpipam
4.8
1%
May 20phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget
CVE-2020-7988
PH
Phpipam
Phpipam
8.8
1%
Mar 4An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4
CVE-2019-16696
PH
Phpipam
Phpipam
9.8
2%
Sep 22phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used
CVE-2019-16695
PH
Phpipam
Phpipam
9.8
2%
Sep 22phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used
CVE-2019-16694
PH
Phpipam
Phpipam
9.8
2%
Sep 22phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used
CVE-2019-16693
PH
Phpipam
Phpipam
9.8
4%
Sep 22phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used
CVE-2019-16692
PH
Phpipam
Phpipam
9.8
10%
Sep 22phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used
CVE-2019-1000010
PH
Phpipam
Phpipam
6.1
1%
Feb 4phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser
CVE-2018-1000870
PH
Phpipam
Phpipam
5.4
1%
Dec 20PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser
CVE-2018-1000869
PH
Phpipam
Phpipam
9.8
2%
Dec 20phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection
CVE-2018-1000860
PH
Phpipam
Phpipam
4.7
1%
Dec 20phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page…
CVE-2018-10329
PH
Phpipam
Phpipam
6.1
1%
Apr 24app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter
CVE-2017-15640
PH
Phpipam
Phpipam
5.4
1%
Apr 21app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter
CVE-2017-6481
PH
Phpipam
Phpipam
6.1
1%
Mar 5Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2
CVE-2015-6529
PH
Phpipam
Phpipam
–
2%
Aug 20Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to…