Test ID:	1.3.6.1.4.1.25623.1.0.106700
Category:	Web application abuses
Title:	phpIPAM <= 1.2.1 Multiple XSS Vulnerabilities
Summary:	phpIPAM is prone to multiple cross-site scripting (XSS); vulnerabilities.
Description:	Summary: phpIPAM is prone to multiple cross-site scripting (XSS) vulnerabilities. Vulnerability Insight: The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (instructions in app/admin/instructions/preview.php subnetId in app/admin/powerDNS/refresh-ptr-records.php). Vulnerability Impact: An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Affected Software/OS: phpIPAM version 1.2.1 and prior. Solution: Update to version 1.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6481 BugTraq ID: 96573 http://www.securityfocus.com/bid/96573
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.