Phpipam vulnerabilities
25 CVEs and advisories name Phpipam as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-108720phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages
- CVE-2026-97818phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.
- CVE-2026-67602phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache
- CVE-2026-75105phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter
- CVE-2026-12194PHPIPAM Authenticated LFI
- CVE-2024-55093phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts.
- CVE-2024-10721Store XSS in phpipam/phpipam
- CVE-2024-10727Cross-Site Scripting (XSS) in phpipam/phpipam
- CVE-2024-10720Stored Cross-site Scripting (XSS) in phpipam/phpipam
- CVE-2024-10722Stored Cross-site Scripting (XSS) in phpipam/phpipam
- CVE-2024-10719Stored Cross-site Scripting (XSS) in phpipam/phpipam
- CVE-2024-10718Cookie without Secure attribute in phpipam/phpipam
- CVE-2024-10724Stored XSS in IPV6 Section in phpipam/phpipam
- CVE-2024-10723Stored XSS in phpipam/phpipam
- CVE-2024-10725Stored Cross-site Scripting (XSS) in phpipam/phpipam
- CVE-2022-1226Cross-site Scripting (XSS) in phpipam/phpipam
- CVE-2024-0787Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam
- CVE-2023-1212Cross-site Scripting (XSS) - Stored in phpipam/phpipam
- CVE-2023-1211 SQL Injection in phpipam/phpipam
- CVE-2023-0678Missing Authorization in phpipam/phpipam
- CVE-2023-0677Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
- CVE-2023-0676Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
- CVE-2022-1225Incorrect Privilege Assignment in phpipam/phpipam
- CVE-2022-1223Incorrect Authorization in phpipam/phpipam
- CVE-2022-1224Improper Authorization in phpipam/phpipam