Skip to content
Phpipam Phpipam vulnerabilities
-
phpipam
phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages
CVE-2026-108720
5.3 Medium
-
phpipam
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api...
CVE-2026-97818
8.6 High
-
phpipam
phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache
CVE-2026-67602
9.3 Critical
-
phpipam
phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter
CVE-2026-75105
8.7 High
-
phpipam
PHPIPAM Authenticated LFI
CVE-2026-12194
2.3 Low
-
phpipam
Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote...
CVE-2025-61078
6.1 Medium
-
phpipam
phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export...
CVE-2025-60912
3.3 Low
-
phpipam
phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install...
CVE-2024-55093
5.4 Medium
-
phpipam, phpipam phpipam/phpipam +1 more
Store XSS in phpipam/phpipam
CVE-2024-10721
3.5 Low
-
phpipam, phpipam phpipam/phpipam +1 more
Cross-Site Scripting (XSS) in phpipam/phpipam
CVE-2024-10727
3.5 Low
-
phpipam, phpipam phpipam/phpipam +1 more
Stored Cross-site Scripting (XSS) in phpipam/phpipam
CVE-2024-10720
8.2 High
-
phpipam, phpipam phpipam/phpipam +1 more
Stored Cross-site Scripting (XSS) in phpipam/phpipam
CVE-2024-10722
3.5 Low
-
phpipam, phpipam phpipam/phpipam +1 more
Stored Cross-site Scripting (XSS) in phpipam/phpipam
CVE-2024-10719
2.4 Low
-
phpipam, phpipam phpipam/phpipam +1 more
Cookie without Secure attribute in phpipam/phpipam
CVE-2024-10718
5.3 Medium
-
phpipam, phpipam phpipam/phpipam +1 more
Stored XSS in IPV6 Section in phpipam/phpipam
CVE-2024-10724
3.5 Low
-
phpipam, phpipam phpipam/phpipam +1 more
Stored XSS in phpipam/phpipam
CVE-2024-10723
3.5 Low
-
phpipam, phpipam phpipam/phpipam +1 more
Stored Cross-site Scripting (XSS) in phpipam/phpipam
CVE-2024-10725
3.5 Low
-
phpipam, phpipam phpipam/phpipam +1 more
Cross-site Scripting (XSS) in phpipam/phpipam
CVE-2022-1226
3.5 Low
-
phpipam, phpipam phpipam/phpipam +1 more
Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam
CVE-2024-0787
5.3 Medium
-
phpipam
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load...
CVE-2024-41358
Public exploit
6.1 Medium
-
phpipam
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.
CVE-2024-41357
Public exploit
7.1 High
-
phpipam
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit...
CVE-2024-41356
4.7 Medium
-
phpipam
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php.
CVE-2024-41355
6.5 Medium
-
phpipam
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php
CVE-2024-41354
7.1 High
-
phpipam
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php
CVE-2024-41353
7.1 High
-
phpipam
Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname...
CVE-2023-41580
7.5 High
-
phpipam
phpipam Header redirect
CVE-2023-4965
2.7 Low
-
phpipam
phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via...
CVE-2023-24657
Public exploit
6.1 Medium
-
phpipam, phpipam phpipam/phpipam +1 more
Cross-site Scripting (XSS) - Stored in phpipam/phpipam
CVE-2023-1212
5.9 Medium
-
phpipam, phpipam phpipam/phpipam +1 more
SQL Injection in phpipam/phpipam
CVE-2023-1211
Public exploit
7.2 High
-
phpipam, phpipam phpipam/phpipam +1 more
Missing Authorization in phpipam/phpipam
CVE-2023-0678
EPSS 37.3%
7.5 High
-
phpipam, phpipam phpipam/phpipam +1 more
Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
CVE-2023-0677
4.4 Medium
-
phpipam, phpipam phpipam/phpipam +1 more
Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
CVE-2023-0676
2.4 Low
-
phpipam
phpipam Import Preview import-load-data.php cross site scripting
CVE-2022-3845
2.4 Low
-
phpipam
phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component ...
CVE-2022-41443
9.8 Critical
-
phpipam, phpipam phpipam/phpipam +1 more
Incorrect Privilege Assignment in phpipam/phpipam
CVE-2022-1225
6.5 Medium
-
phpipam, phpipam phpipam/phpipam +1 more
Incorrect Authorization in phpipam/phpipam
CVE-2022-1223
6.5 Medium
-
phpipam, phpipam phpipam/phpipam +1 more
Improper Authorization in phpipam/phpipam
CVE-2022-1224
6.5 Medium
-
phpipam
phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php...
CVE-2021-46426
6.1 Medium
-
phpipam
PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the...
CVE-2022-23045
4.8 Medium
-
phpipam
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet"...
CVE-2022-23046
Public exploit
EPSS 25.2%
7.2 High
-
phpipam
phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip...
CVE-2021-35438
6.1 Medium
-
phpipam
phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User...
CVE-2020-13225
4.8 Medium
-
phpipam
An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to...
CVE-2020-7988
8.8 High
-
phpipam
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table...
CVE-2019-16692
Public exploit
EPSS 10.3%
9.8 Critical
-
phpipam
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when...
CVE-2019-16693
Public exploit
9.8 Critical
-
phpipam
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter...
CVE-2019-16694
9.8 Critical
-
phpipam
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when...
CVE-2019-16695
9.8 Critical
-
phpipam
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when...
CVE-2019-16696
9.8 Critical
-
phpipam
phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet...
CVE-2019-1000010
6.1 Medium
- Show olderLoading…