High severity7.2NVD Advisory· Published Jan 19, 2022· Updated Jun 17, 2026

CVE-2022-23046

Description

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpipam/Phpipam3 versions
cpe:2.3:a:phpipam:phpipam:1.4.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:phpipam:phpipam:1.4.4:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <=1.4.4

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/165683/PHPIPAM-1.4.4-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
fluidattacks.com/advisories/mercury/nvdExploitThird Party Advisory
github.com/phpipam/phpipam/releases/tag/v1.4.5nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.020
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000