CVE-2018-10329: XSS
app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10329?
The severity of CVE-2018-10329 is medium, with a CVSS severity score of 6.1.
How does CVE-2018-10329 impact phpIPAM?
CVE-2018-10329 impacts phpIPAM version 1.3.1, specifically the /tools/mac-lookup/ functionality, allowing for reflected XSS attacks via the mac parameter.
How can I fix CVE-2018-10329 in phpIPAM?
To fix CVE-2018-10329 in phpIPAM, you should upgrade to a version that has addressed the issue or apply any available patches provided by the phpIPAM project.
Where can I find more information about CVE-2018-10329?
You can find more information about CVE-2018-10329 on the official phpIPAM GitHub page at the following link: https://github.com/phpipam/phpipam/issues/1903
What is the CWE ID for CVE-2018-10329?
The CWE ID for CVE-2018-10329 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.