EDB-47438

PoC

phpIPAM 1.4 - SQL Injection

view exploit source exploit_dbtype webappsauthor Kevin Kirschepublished 2019-09-30catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-16692UScritical9.8Exploit
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan