PT-2022-24411 · Phpipam+1 · Phpipam+1

CVE-2022-3845

·

Published

2016-12-29

·

Updated

2023-05-20

CVSS v3.1

2.4

Low

VectorAV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions phpipam versions prior to 1.5.0
Description A vulnerability has been found in phpipam, allowing for cross site scripting through the manipulation of an unknown functionality in the file app/admin/import-export/import-load-data.php of the Import Preview Handler component. The attack can be launched remotely.
Recommendations For versions prior to 1.5.0, upgrade to version 1.5.0 to address this issue.

Exploit

Fix

Improper Neutralization

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-707CWE-79

Related Identifiers

ALT-PU-2016-2512
ALT-PU-2023-1837
CVE-2022-3845

Affected Products

Alt Linux
Phpipam