CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000870

PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. Admin(Victim) views user in admin-panel and gets exploited.. This vulnerability appears to have been fixed in 1.4.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 56.3%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2018-1000870

Phpipam » Phpipam » Version: N/A

cpe:2.3:a:phpipam:phpipam:-
Phpipam » Phpipam » Version: 0.1

cpe:2.3:a:phpipam:phpipam:0.1
Phpipam » Phpipam » Version: 0.2

cpe:2.3:a:phpipam:phpipam:0.2
Phpipam » Phpipam » Version: 0.3

cpe:2.3:a:phpipam:phpipam:0.3
Phpipam » Phpipam » Version: 0.4

cpe:2.3:a:phpipam:phpipam:0.4
Phpipam » Phpipam » Version: 0.5

cpe:2.3:a:phpipam:phpipam:0.5
Phpipam » Phpipam » Version: 0.6

cpe:2.3:a:phpipam:phpipam:0.6
Phpipam » Phpipam » Version: 0.7

cpe:2.3:a:phpipam:phpipam:0.7
Phpipam » Phpipam » Version: 0.8

cpe:2.3:a:phpipam:phpipam:0.8
Phpipam » Phpipam » Version: 0.9

cpe:2.3:a:phpipam:phpipam:0.9
Phpipam » Phpipam » Version: 1.0

cpe:2.3:a:phpipam:phpipam:1.0
Phpipam » Phpipam » Version: 1.1

cpe:2.3:a:phpipam:phpipam:1.1
Phpipam » Phpipam » Version: 1.1.010

cpe:2.3:a:phpipam:phpipam:1.1.010
Phpipam » Phpipam » Version: 1.2

cpe:2.3:a:phpipam:phpipam:1.2
Phpipam » Phpipam » Version: 1.3

cpe:2.3:a:phpipam:phpipam:1.3
Phpipam » Phpipam » Version: 1.3.1

cpe:2.3:a:phpipam:phpipam:1.3.1
Phpipam » Phpipam » Version: 1.3.2

cpe:2.3:a:phpipam:phpipam:1.3.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000870

Products

Pricing

Contact Us