CVE-2019-1000010: XSS

Q: What is CVE-2019-1000010?

CVE-2019-1000010 is a Cross Site Scripting (XSS) vulnerability in the phpIPAM subnet-scan-telnet.php script that allows an attacker to execute code in the victim's browser.

Q: How can an attacker exploit CVE-2019-1000010?

An attacker can exploit CVE-2019-1000010 by crafting a malicious link that, when visited by the victim, executes the attacker's code in the victim's browser.

Q: Which version of phpIPAM is affected by CVE-2019-1000010?

phpIPAM version 1.3.2 and earlier are affected by CVE-2019-1000010.

Q: How severe is CVE-2019-1000010?

CVE-2019-1000010 has a severity rating of 6.1, which is considered medium.

Q: Has CVE-2019-1000010 been fixed?

Yes, CVE-2019-1000010 has been fixed in phpIPAM.

Published Feb 4, 2019

Updated

phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack appears to be exploitable via victim visits link crafted by an attacker. This vulnerability appears to have been fixed in 1.4.

Affected Software

1 affected component

Phpipam Phpipam<=1.3.2

Remediation

Patch Available

https://github.com/phpipam/phpipam/commit/fd37bd8fb2b9c306079db505e0e3fe79a096c31c

Event History

Feb 4, 2019

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is CVE-2019-1000010?

CVE-2019-1000010 is a Cross Site Scripting (XSS) vulnerability in the phpIPAM subnet-scan-telnet.php script that allows an attacker to execute code in the victim's browser.

How can an attacker exploit CVE-2019-1000010?