ALT-PU-2023-3558-1
Package phpipam updated to version 1.5.2-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Published: 2023-04-02
BDU:2023-01781
Уязвимость сценария app/admin/custom-fields/edit-result.php веб-приложения для управления IP-адресами phpipam, позволяющая нарушителю выполнить произвольные SQL-команды
Severity: HIGH (7.2)Vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL (9.0)Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
References:
Published: 2023-02-04
Modified: 2026-02-13
Modified: 2026-02-13
CVE-2023-0676
Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.
Severity: MEDIUM (6.1)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References:
- https://github.com/phpipam/phpipam/commit/94ec73ff1d33926b75b811ded6f0b4a46088a7ec
- https://huntr.dev/bounties/b72d4f0c-8a96-4b40-a031-7d469c6ab93b
- https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-0676.md
- https://github.com/phpipam/phpipam/commit/94ec73ff1d33926b75b811ded6f0b4a46088a7ec
- https://huntr.dev/bounties/b72d4f0c-8a96-4b40-a031-7d469c6ab93b
Published: 2023-02-04
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2023-0677
Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1.
Severity: MEDIUM (6.1)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References:
Published: 2023-02-04
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2023-0678
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1.
Severity: MEDIUM (5.3)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References:
Published: 2023-03-07
Modified: 2026-02-16
Modified: 2026-02-16
CVE-2023-1211
SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.
Severity: HIGH (7.2)Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References:
- https://github.com/phpipam/phpipam/commit/16e7a94fb69412e569ccf6f2fe0a1f847309c922
- https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460892afd
- https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-1211.md
- https://github.com/phpipam/phpipam/commit/16e7a94fb69412e569ccf6f2fe0a1f847309c922
- https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460892afd
Published: 2023-03-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2023-1212
Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.
Severity: MEDIUM (4.8)Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
References: