phpIPAM 1.4
Approved changes feed: RSS · Atom
cpe:2.3:a:phpipam:phpipam:1.4:*:*:*:*:*:*:*
part: a version: 1.4 update: *
| Vendor | Phpipam (36f32332-aad9-5c0f-92dd-c6fa39ebf918) |
|---|---|
| Product | Phpipam (9e6a234a-2b3d-58b5-8e92-84eeed6f2eef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/bertramtruong/phpipam |
purl2cpe | 2026-06-01 10:12:43.582473 |
pkg:github/phpipam/phpipam |
purl2cpe | 2026-06-01 10:12:43.582474 |
pkg:rpm/opensuse/phpipam |
purl2cpe | 2026-06-01 10:12:43.582476 |
pkg:sourceforge/phpipam |
purl2cpe | 2026-06-01 10:12:43.582477 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7988 |
vulnerable | 2026-06-08 05:27:14.595784 |
Details available
An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to more data and functionality. This issue exists due to the lack of a requirement to provide the old password, and the lack of security tokens.
Published: 2020-03-04T16:07:52.000Z
Updated: 2024-08-04T09:48:24.607Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13225 |
vulnerable | 2026-06-08 05:18:00.350733 |
Details available
phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.
Published: 2020-05-20T03:05:27.000Z
Updated: 2024-08-04T12:11:19.382Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.