Sploitus

CVE-2022-23046

10 known exploits for CVE-2022-23046

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php

Affected products
Phpipam
Phpipam
= 1.4.4
CVSS 3.1
7.2 HIGH
EPSS
25.2% (98th percentile)
Weakness
CWE-89
NVD status
Modified
Published
2022-01-19
CVE-2022-23046 at NVD
Authoritative description, scoring and affected products

10 known exploits for CVE-2022-23046

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2022-23046
2026-08-29 KitPloitKITPLOIT
CVE-2022-23046
2026-08-26 KitPloitKITPLOIT
CVE-2022-23046
2026-08-26 KitPloitKITPLOIT
phpipam_1.4.4
2026-08-26 KitPloitKITPLOIT
Exploit for SQL Injection in Phpipam
2022-05-23 bernauersGITHUB
Exploit for SQL Injection in Phpipam
2022-02-15 dnr6419GITHUB
PHPIPAM 1.4.4 - SQL injection (Authenticated) Exploit
2022-01-25 Rodolfo TavaresZDTPython
PHPIPAM 1.4.4 - SQLi (Authenticated)
2022-01-25 Rodolfo TavaresEXPLOITDBPython
PHPIPAM 1.4.4 SQL Injection
2022-01-25 Rodolfo TavaresPACKETSTORMPython
Exploit for SQL Injection in Phpipam
2022-01-22 jcarabantesGITHUB