CVE-2022-23046

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via…

published January 19, 2022

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25243 · 97.9th percentile
Published
2022-01-19T20:38Z
EPSS history
Timeline
  • 19 JAN 20:38Z
    PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via…
    cvelistv5