CVE-2019-1000010

phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack appears to be exploitable via victim visits link crafted by an attacker. This vulnerability appears to have been fixed in 1.4.

• CWE-79

• https://github.com/phpipam/phpipam/commit/fd37bd8fb2b9c306079db505e0e3fe79a096c31cPatch, Third Party Advisory
• https://github.com/phpipam/phpipam/issues/2327Exploit, Issue Tracking, Third Party Advisory
• https://github.com/phpipam/phpipam/commit/fd37bd8fb2b9c306079db505e0e3fe79a096c31cPatch, Third Party Advisory
• https://github.com/phpipam/phpipam/issues/2327Exploit, Issue Tracking, Third Party Advisory

Published

Feb 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1000004yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contain…
• CVE-2019-1000005mPDF version 7.1.7 and earlier contains a CWE-502: Deseriali…
• CVE-2019-1000006RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab…9.8
• CVE-2019-1000007aioxmpp version 0.10.2 and earlier contains a Improper Handl…
• CVE-2019-1000008All versions of Helm between Helm >=2.0.0 and < 2.12.2 conta…
• CVE-2019-1000009Helm ChartMuseum version >=0.1.0 and < 0.8.1 contains a CWE-…
• CVE-2019-1000011API Platform version from 2.2.0 to 2.3.5 contains an Incorre…
• CVE-2019-1000012Hex package manager version 0.14.0 through 0.18.2 contains a…
• CVE-2019-1000013Hex package manager hex_core version 0.3.0 and earlier conta…
• CVE-2019-1000014Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Sig…
• CVE-2019-1000015Chamilo Chamilo-lms version 1.11.8 and earlier contains a Cr…
• CVE-2019-1000016FFMPEG version 4.1 contains a CWE-129: Improper Validation o…