CVE-2017-6481
Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
- Affected products
- Phpipam
- Phpipam
- ≤ 1.2
- CVSS 3.0
- 6.1 MEDIUM
- EPSS
- 0.7% (50th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2017-03-05
CVE-2017-6481 at NVD
No indexed exploits for CVE-2017-6481 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2017-6481 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.