SQL Injection

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.phpCVE-2022-23046Phpipam · 25% likely

   CWE-89

2. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.CVE-2019-16692Phpipam · 10% likely

   CWE-89

3. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.CVE-2019-16693Phpipam · 4.3% likely

   CWE-89

4. SQL Injection in phpipam/phpipamCVE-2023-1211phpipam · CVSS 7.2 · 3.0% likely

   CWE-89

5. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used.CVE-2019-16696Phpipam · 1.9% likely

   CWE-89

6. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used.CVE-2019-16695Phpipam · 1.9% likely

   CWE-89

7. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used.CVE-2019-16694Phpipam · 1.9% likely

   CWE-89

8. phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to be exploitable via Rough user,…CVE-2018-1000869Phpipam · 1.8% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.