CVE-2018-1000869

phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to be exploitable via Rough user, exploiting the vulnerability to access information he/she does not have access to.. This vulnerability appears to have been fixed in 1.4.

• CWE-89

• https://github.com/phpipam/phpipam/commit/856b10ca85a24c04ed8651f4e13f867ec78a353dPatch, Third Party Advisory
• https://github.com/phpipam/phpipam/issues/2344Exploit, Third Party Advisory
• https://github.com/phpipam/phpipam/commit/856b10ca85a24c04ed8651f4e13f867ec78a353dPatch, Third Party Advisory
• https://github.com/phpipam/phpipam/issues/2344Exploit, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000863A data modification vulnerability exists in Jenkins 2.153 an…
• CVE-2018-1000864A denial of service vulnerability exists in Jenkins 2.153 an…
• CVE-2018-1000865A sandbox bypass vulnerability exists in Script Security Plu…
• CVE-2018-1000866A sandbox bypass vulnerability exists in Pipeline: Groovy Pl…
• CVE-2018-1000867WeBid version up to current version 1.2.2 contains a SQL Inj…
• CVE-2018-1000868WeBid version up to current version 1.2.2 contains a Cross S…
• CVE-2018-1000870PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerab…
• CVE-2018-1000871HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contai…
• CVE-2018-1000872OpenKMIP PyKMIP version All versions before 0.8.0 contains a…
• CVE-2018-1000873Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Im…6.5
• CVE-2018-1000874PHP cebe markdown parser version 1.2.0 and earlier contains …6.1
• CVE-2018-1000875Berkeley Open Infrastructure for Network Computing BOINC Ser…9.8