CVE-2018-1000869: SQL Injection
Published Dec 20, 2018
·Updated
phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to be exploitable via Rough user, exploiting the vulnerability to access information he/she does not have access to.. This vulnerability appears to have been fixed in 1.4.
Affected Software
1 affected component
Phpipam Phpipam=1.3.2
Remediation
Event History
Dec 20, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this phpIPAM vulnerability?
The vulnerability ID for this phpIPAM vulnerability is CVE-2018-1000869.
2
What is the severity of CVE-2018-1000869?
The severity of CVE-2018-1000869 is critical (9.8 out of 10).
3
What is the affected software version for CVE-2018-1000869?
The affected software version for CVE-2018-1000869 is phpIPAM version 1.3.2.
4
How can this vulnerability be exploited?
This vulnerability can be exploited through a SQL injection attack.
5
Is there a fix available for CVE-2018-1000869?
Yes, a fix is available for CVE-2018-1000869. Please refer to the provided references for more information.