SQL Injection in phpipam/phpipam
CVE-2023-1211

7.2HIGH

Key Information:

Vendor

PHPipam

Status
PHPipam/PHPipam
Vendor
CVE Published:
7 March 2023

What is CVE-2023-1211?

A SQL Injection vulnerability in the phpIPAM product allows attackers to execute arbitrary SQL commands in the database. This flaw affects all versions prior to v1.5.2, enabling potential unauthorized access to sensitive data and manipulation of essential records. It is crucial for users to upgrade to the latest version to ensure the integrity and security of their network management activities.

Affected Version(s)

phpipam/phpipam < unspecified

References

https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460...
https://github.com/phpipam/phpipam/commit/16e7a94fb69412e...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.