CVE-2015-6529: XSS

Published Aug 20, 2015

Updated

Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to site/error.php or (2) ip parameter to site/tools/searchResults.php.

Affected Software

1 affected component

Phpipam Phpipam=1.1.010

Event History

Aug 20, 2015

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6529?

CVE-2015-6529 is considered a high severity vulnerability due to its potential for exploitation via cross-site scripting attacks.

How do I fix CVE-2015-6529?

To address CVE-2015-6529, upgrade phpipam to a version that has patched the XSS vulnerabilities.

What types of attacks does CVE-2015-6529 enable?

CVE-2015-6529 enables remote attackers to perform cross-site scripting attacks, allowing them to inject arbitrary web scripts or HTML.

Which software version is affected by CVE-2015-6529?

CVE-2015-6529 specifically affects phpipam version 1.1.010.

Where do the vulnerabilities in CVE-2015-6529 occur?

The vulnerabilities in CVE-2015-6529 occur in the error handling pages, specifically the site/error.php and site/tools/searchResults.php files.