← All advisories

Critical severity9.8NVD Advisory· Published Sep 22, 2019· Updated Jun 17, 2026

CVE-2019-16696

CVE-2019-16696

Description

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Phpipam/Phpipam2 versions
cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*range: <=1.4
- (no CPE)range: <=1.4
phpIPAM/phpIPAMdescription

Patches

Vulnerability mechanics

References

1

github.com/phpipam/phpipam/issues/2738nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.