Phpipam vulnerabilities

Products

• Phpipam 57
• Phpipam/phpipam 19

Newest

• phpipam phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages CVE-2026-108720 5.3 MediumOctober 11, 2026
• phpipam phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api... CVE-2026-97818 8.6 HighSeptember 25, 2026
• phpipam phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache CVE-2026-67602 Public exploit 9.3 CriticalAugust 24, 2026
• phpipam phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter CVE-2026-75105 8.7 HighAugust 17, 2026
• phpipam PHPIPAM Authenticated LFI CVE-2026-12194 2.3 LowJuly 4, 2026
• phpipam Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote... CVE-2025-61078 6.1 MediumDecember 9, 2025
• phpipam phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export... CVE-2025-60912 3.3 LowDecember 8, 2025
• phpipam phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install... CVE-2024-55093 5.4 MediumMarch 31, 2025
• phpipam, phpipam phpipam/phpipam +1 more Store XSS in phpipam/phpipam CVE-2024-10721 3.5 LowMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Cross-Site Scripting (XSS) in phpipam/phpipam CVE-2024-10727 3.5 LowMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Stored Cross-site Scripting (XSS) in phpipam/phpipam CVE-2024-10720 8.2 HighMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Stored Cross-site Scripting (XSS) in phpipam/phpipam CVE-2024-10722 3.5 LowMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Stored Cross-site Scripting (XSS) in phpipam/phpipam CVE-2024-10719 2.4 LowMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Cookie without Secure attribute in phpipam/phpipam CVE-2024-10718 5.3 MediumMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Stored XSS in IPV6 Section in phpipam/phpipam CVE-2024-10724 3.5 LowMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Stored XSS in phpipam/phpipam CVE-2024-10723 3.5 LowMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Stored Cross-site Scripting (XSS) in phpipam/phpipam CVE-2024-10725 3.5 LowMarch 20, 2025
• phpipam, phpipam phpipam/phpipam +1 more Cross-site Scripting (XSS) in phpipam/phpipam CVE-2022-1226 3.5 LowNovember 15, 2024
• phpipam, phpipam phpipam/phpipam +1 more Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam CVE-2024-0787 5.3 MediumNovember 15, 2024
• phpipam phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load... CVE-2024-41358 Public exploit 6.1 MediumAugust 29, 2024
• phpipam phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php. CVE-2024-41357 Public exploit 7.1 HighJuly 26, 2024
• phpipam phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit... CVE-2024-41356 4.7 MediumJuly 26, 2024
• phpipam phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php. CVE-2024-41355 6.5 MediumJuly 26, 2024
• phpipam phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php CVE-2024-41354 7.1 HighJuly 26, 2024
• phpipam phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php CVE-2024-41353 7.1 HighJuly 26, 2024
• phpipam Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname... CVE-2023-41580 7.5 HighOctober 2, 2023
• phpipam phpipam Header redirect CVE-2023-4965 2.7 LowSeptember 14, 2023
• phpipam phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via... CVE-2023-24657 Public exploit 6.1 MediumMarch 8, 2023
• phpipam, phpipam phpipam/phpipam +1 more Cross-site Scripting (XSS) - Stored in phpipam/phpipam CVE-2023-1212 5.9 MediumMarch 6, 2023
• phpipam, phpipam phpipam/phpipam +1 more SQL Injection in phpipam/phpipam CVE-2023-1211 Public exploit 7.2 HighMarch 6, 2023
• phpipam, phpipam phpipam/phpipam +1 more Missing Authorization in phpipam/phpipam CVE-2023-0678 EPSS 37.3% 7.5 HighFebruary 4, 2023
• phpipam, phpipam phpipam/phpipam +1 more Cross-site Scripting (XSS) - Reflected in phpipam/phpipam CVE-2023-0677 4.4 MediumFebruary 4, 2023
• phpipam, phpipam phpipam/phpipam +1 more Cross-site Scripting (XSS) - Reflected in phpipam/phpipam CVE-2023-0676 2.4 LowFebruary 4, 2023
• phpipam phpipam Import Preview import-load-data.php cross site scripting CVE-2022-3845 2.4 LowNovember 2, 2022
• phpipam phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component ... CVE-2022-41443 9.8 CriticalOctober 3, 2022
• phpipam, phpipam phpipam/phpipam +1 more Incorrect Privilege Assignment in phpipam/phpipam CVE-2022-1225 6.5 MediumApril 4, 2022
• phpipam, phpipam phpipam/phpipam +1 more Incorrect Authorization in phpipam/phpipam CVE-2022-1223 6.5 MediumApril 4, 2022
• phpipam, phpipam phpipam/phpipam +1 more Improper Authorization in phpipam/phpipam CVE-2022-1224 6.5 MediumApril 4, 2022
• phpipam phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php... CVE-2021-46426 6.1 MediumMarch 25, 2022
• phpipam PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the... CVE-2022-23045 4.8 MediumJanuary 19, 2022
• phpipam PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet"... CVE-2022-23046 Public exploit EPSS 25.2% 7.2 HighJanuary 19, 2022
• phpipam phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip... CVE-2021-35438 6.1 MediumJune 23, 2021
• phpipam phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User... CVE-2020-13225 4.8 MediumMay 20, 2020
• phpipam An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to... CVE-2020-7988 8.8 HighMarch 4, 2020
• phpipam phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table... CVE-2019-16692 Public exploit EPSS 10.3% 9.8 CriticalSeptember 22, 2019
• phpipam phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when... CVE-2019-16693 Public exploit 9.8 CriticalSeptember 22, 2019
• phpipam phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter... CVE-2019-16694 9.8 CriticalSeptember 22, 2019
• phpipam phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when... CVE-2019-16695 9.8 CriticalSeptember 22, 2019
• phpipam phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when... CVE-2019-16696 9.8 CriticalSeptember 22, 2019
• phpipam phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet... CVE-2019-1000010 6.1 MediumFebruary 4, 2019
• Show olderLoading…