Cross-site Scripting

Every one of the 33 is a mark on the map. Named now: 1 to 26, most at risk first.

1. phpIPAM - 1.6 - Cross-Site ScriptingCVE-2023-24657Phpipam · CVSS 6.1 · 3.9% likely

   CWE-79

2. phpIPAM 1.5.1 - Cross-site ScriptingCVE-2023-0676phpipam · CVSS 2.4 · 1.5% likely

   CWE-79

3. Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to site/error.ph…CVE-2015-6529Phpipam · 2.4% likely

   CWE-79

4. phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php.CVE-2024-41358Phpipam · CVSS 6.1 · 1.6% likely

   CWE-79

5. phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.CVE-2024-41357Phpipam · CVSS 7.1 · 1.1% likely

   CWE-79

6. phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator.CVE-2021-35438Phpipam · 1.0% likely

   CWE-79

7. PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to…CVE-2018-1000870Phpipam · 0.9% likely

   CWE-79

8. phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality.CVE-2021-46426Phpipam · 0.9% likely

   CWE-79

9. phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack a…CVE-2019-1000010Phpipam · 0.9% likely

   CWE-79

10. app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter.CVE-2018-10329Phpipam · 0.8% likely

    CWE-79

11. phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page encap…CVE-2018-1000860Phpipam · 0.8% likely

    CWE-79

12. phpipam Import Preview import-load-data.php cross site scriptingCVE-2022-3845Phpipam · CVSS 2.4 · 0.7% likely

    CWE-79

13. Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (…CVE-2017-6481Phpipam · 0.7% likely

    CWE-79

14. app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter.CVE-2017-15640Phpipam · 0.7% likely

    CWE-79

15. PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting…CVE-2022-23045Phpipam · 0.6% likely

    CWE-79

16. phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.CVE-2020-13225Phpipam · 0.6% likely

    CWE-79

17. Cross-site Scripting (XSS) - Stored in phpipam/phpipamCVE-2023-1212phpipam · CVSS 5.9 · 0.5% likely

    CWE-79

18. Cross-site Scripting (XSS) - Reflected in phpipam/phpipamCVE-2023-0677phpipam · CVSS 4.4 · 0.4% likely

    CWE-79

19. phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php.CVE-2024-41356Phpipam · CVSS 4.7 · 0.4% likely

    CWE-79

20. Cross-site Scripting (XSS) in phpipam/phpipamCVE-2022-1226phpipam · CVSS 3.5 · 0.4% likely

    CWE-79

21. Stored Cross-site Scripting (XSS) in phpipam/phpipamCVE-2024-10720phpipam · CVSS 8.2 · 0.4% likely

    CWE-79

22. phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php.CVE-2024-41355Phpipam · CVSS 6.5 · 0.4% likely

    CWE-79

23. Cross-Site Scripting (XSS) in phpipam/phpipamCVE-2024-10727phpipam · CVSS 3.5 · 0.4% likely

    CWE-79

24. Stored Cross-site Scripting (XSS) in phpipam/phpipamCVE-2024-10725phpipam · CVSS 3.5 · 0.3% likely

    CWE-79

25. Stored XSS in IPV6 Section in phpipam/phpipamCVE-2024-10724phpipam · CVSS 3.5 · 0.3% likely

    CWE-79

26. Stored XSS in phpipam/phpipamCVE-2024-10723phpipam · CVSS 3.5 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.