CVE-2022-3845

A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.5.0 is able to address this issue. The name of the patch is 22c797c3583001211fe7d31bccd3f1d4aeeb3bbc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-212863.

• CWE-707
• CWE-79

• https://github.com/phpipam/phpipam/commit/22c797c3583001211fe7d31bccd3f1d4aeeb3bbcPatch, Third Party Advisory
• https://github.com/phpipam/phpipam/releases/tag/v1.5.0Release Notes, Third Party Advisory
• https://vuldb.com/?id.212863Third Party Advisory
• https://github.com/phpipam/phpipam/commit/22c797c3583001211fe7d31bccd3f1d4aeeb3bbcPatch, Third Party Advisory
• https://github.com/phpipam/phpipam/releases/tag/v1.5.0Release Notes, Third Party Advisory
• https://vuldb.com/?id.212863Third Party Advisory

Published

Nov 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38444Adobe Dimension versions 3.4.5 is affected by a Use After Fr…7.8
• CVE-2022-38445Adobe Dimension versions 3.4.5 is affected by a Use After Fr…7.8
• CVE-2022-38446Adobe Dimension versions 3.4.5 is affected by a Use After Fr…7.8
• CVE-2022-38447Adobe Dimension versions 3.4.5 is affected by a Use After Fr…7.8
• CVE-2022-38448Adobe Dimension versions 3.4.5 is affected by a Use After Fr…7.8
• CVE-2022-38449Adobe Acrobat Reader versions 22.002.20212 (and earlier) and…5.5
• CVE-2022-38450Adobe Acrobat Reader versions 22.002.20212 (and earlier) and…7.8
• CVE-2022-38451A directory traversal vulnerability exists in the httpd upda…7.5
• CVE-2022-38452A command execution vulnerability exists in the hidden telne…8.8
• CVE-2022-38453Multiple binary application files on the CMS8000 device are …4.4
• CVE-2022-38454Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io…8.8
• CVE-2022-38456Exposure of Sensitive Information to an Unauthorized Actor v…7.5