CVE-2022-23046
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edi...
Original description
The description as published by the source.
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php
References
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com
- web github.com