Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. Admin(Victim) views user in admin-panel and gets exploited.. This vulnerability appears to have been fixed in 1.4.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpIPAM 跨站脚本漏洞
Vulnerability Description
phpIPAM是一套开源的基于PHP和MySQL的IP地址管理应用程序（IPAM）。 phpIPAM 1.3.2及之前版本中的/app/admin/users/print-user.php文件存在跨站脚本漏洞。远程攻击者可通过修改用户设置中的‘theme’参数利用该漏洞在用户的浏览器中执行代码。
CVSS Information
N/A
Vulnerability Type
N/A