GCVE - cpe:2.3:a:phpipam:phpipam:1.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpipam:phpipam:1.6:*:*:*:*:*:*:*

part: a version: 1.6 update: *

Vendor	Phpipam (`36f32332-aad9-5c0f-92dd-c6fa39ebf918`)
Product	Phpipam (`9e6a234a-2b3d-58b5-8e92-84eeed6f2eef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/bertramtruong/phpipam`	purl2cpe	2026-06-01 10:12:43.582537
`pkg:github/phpipam/phpipam`	purl2cpe	2026-06-01 10:12:43.582539
`pkg:rpm/opensuse/phpipam`	purl2cpe	2026-06-01 10:12:43.582540
`pkg:sourceforge/phpipam`	purl2cpe	2026-06-01 10:12:43.582542

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-41358`	vulnerable	2026-06-08 06:43:54.453743	Details available phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php. Published: 2024-08-29T00:00:00.000Z Updated: 2026-01-26T15:53:30.755Z Open on db.gcve.eu Reference links https://github.com/phpipam/phpipam/issues/4148 https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2024-41358.md https://github.com/phpipam/phpipam/commit/3986ac1acfbf47ddd4fe05cd158aaf2cacafe36b https://github.com/phpipam/phpipam/commit/b131fb99c9ada95b38e4cb2749ac599e42fad3d9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41357`	vulnerable	2026-06-08 06:43:54.453062	Details available phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php. Published: 2024-07-26T00:00:00.000Z Updated: 2025-04-16T14:05:43.853Z Open on db.gcve.eu Reference links https://github.com/phpipam/phpipam/issues/4149 https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2024-41357.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41356`	vulnerable	2026-06-08 06:43:54.452475	Details available phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php. Published: 2024-07-26T00:00:00.000Z Updated: 2024-08-02T04:46:51.579Z Open on db.gcve.eu Reference links https://github.com/phpipam/phpipam/issues/4146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41355`	vulnerable	2026-06-08 06:43:54.452002	Details available phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/tools/request-ip/index.php. Published: 2024-07-26T00:00:00.000Z Updated: 2026-02-13T16:37:38.715Z Open on db.gcve.eu Reference links https://github.com/phpipam/phpipam/issues/4151 https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2024-41355.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41354`	vulnerable	2026-06-08 06:43:54.451439	Details available phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php Published: 2024-07-26T00:00:00.000Z Updated: 2024-08-02T04:46:52.397Z Open on db.gcve.eu Reference links https://github.com/phpipam/phpipam/issues/4150	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41353`	vulnerable	2026-06-08 06:43:54.450695	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24657`	vulnerable	2026-06-08 05:56:06.184774	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.