Phpipam

Every one of the 38 is a mark on the map. Named now: 1 to 26, most at risk first.

1. phpIPAM - 1.6 - Cross-Site ScriptingCVE-2023-24657Phpipam · CVSS 6.1 · 3.9% likely

   CWE-79

2. PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.phpCVE-2022-23046Phpipam · 25% likely

   CWE-89

3. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.CVE-2019-16692Phpipam · 10% likely

   CWE-89

4. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.CVE-2019-16693Phpipam · 4.3% likely

   CWE-89

5. Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to site/error.ph…CVE-2015-6529Phpipam · 2.4% likely

   CWE-79

6. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used.CVE-2019-16696Phpipam · 1.9% likely

   CWE-89

7. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used.CVE-2019-16695Phpipam · 1.9% likely

   CWE-89

8. phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used.CVE-2019-16694Phpipam · 1.9% likely

   CWE-89

9. phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to be exploitable via Rough user,…CVE-2018-1000869Phpipam · 1.8% likely

   CWE-89

10. phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php.CVE-2024-41358Phpipam · CVSS 6.1 · 1.6% likely

    CWE-79

11. phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.php.CVE-2022-41443Phpipam · 1.4% likely

    CWE-116

12. phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.CVE-2024-41357Phpipam · CVSS 7.1 · 1.1% likely

    CWE-79

13. phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator.CVE-2021-35438Phpipam · 1.0% likely

    CWE-79

14. PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to…CVE-2018-1000870Phpipam · 0.9% likely

    CWE-79

15. phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality.CVE-2021-46426Phpipam · 0.9% likely

    CWE-79

16. phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack a…CVE-2019-1000010Phpipam · 0.9% likely

    CWE-79

17. Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-search-result.php. This vulnerability allows attackers to enume…CVE-2023-41580Phpipam · 0.9% likely

    CWE-74

18. app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter.CVE-2018-10329Phpipam · 0.8% likely

    CWE-79

19. phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page encap…CVE-2018-1000860Phpipam · 0.8% likely

    CWE-79

20. An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to mo…CVE-2020-7988Phpipam · 0.7% likely

    CWE-352

21. phpipam Import Preview import-load-data.php cross site scriptingCVE-2022-3845Phpipam · CVSS 2.4 · 0.7% likely

    CWE-79

22. Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (…CVE-2017-6481Phpipam · 0.7% likely

    CWE-79

23. app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter.CVE-2017-15640Phpipam · 0.7% likely

    CWE-79

24. phpipam Header redirectCVE-2023-4965Phpipam · CVSS 2.7 · 0.6% likely

    CWE-601

25. PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting…CVE-2022-23045Phpipam · 0.6% likely

    CWE-79

26. phpIPAM < 1.8.2 Authentication Bypass via REST API Object CacheCVE-2026-67602phpipam · CVSS 9.1 · 0.6% likely

    CWE-706

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.