CVE-2023-1211

Summary

SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.

Affected Software

Weaknesses

• CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-1211.md
• https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460892afd
• https://github.com/phpipam/phpipam/commit/16e7a94fb69412e569ccf6f2fe0a1f847309c922

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460892afd
• https://github.com/phpipam/phpipam/commit/16e7a94fb69412e569ccf6f2fe0a1f847309c922

• ←Previous
• Next→