CVE-2022-23046

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory fluidattacks.com
advisory github.com
advisory nvd.nist.gov
web packetstormsecurity.com
web github.com