Not rated
CVE-2022-23046 PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a…
Description
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PhpIPAM | 1.4.4 | No fix stated |
Other CVEs of PhpIPAM
The 6 CVEs of PhpIPAM →
CVE-2026-115982
A vulnerability was detected in phpIPAM up to 1.8.3
5.3
Medium
CVE-2026-115981
A security vulnerability has been detected in phpIPAM up to 1.8.3
4.8
Medium
CVE-2026-4189
A weakness has been identified in phpipam up to 1.7.4
5.1
Medium
CVE-2023-4965
A vulnerability was found in phpipam 1.5.1
2.7
Low