EDB-52453

PoC

phpIPAM 1.4 - SQL-Injection

view exploit source exploit_dbtype webappsauthor CodeSecLabpublished 2025-12-03catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-16693US	critical9.8	4.34% (91st)	Exploit	2019-09-22
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.