CVE-2023-0676

This vulnerability allows an attacker to manipulate the database of phpipam, potentially gaining access to sensitive information or altering data. It affects versions prior to 1.5.2 and requires the attacker to have the ability to send specially crafted requests to the application.

This vulnerability allows an attacker to inject malicious scripts into the IP calculator feature of phpIPAM, which can then execute in the browser of anyone who visits the affected pages. To exploit this, the attacker needs to trick users into clicking on a specially crafted link that leads to the vulnerable pages.