{"vulnerability": "CVE-2021-46426", "sightings": [{"uuid": "eab4ba39-1eff-4e55-acdc-22eeeef45232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-46426", "type": "seen", "source": "https://t.me/cibsecurity/39548", "content": "\u203c CVE-2021-46426 \u203c\n\nphpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-25T19:30:58.000000Z"}, {"uuid": "9e182225-68f0-4e6b-9e1a-bb0cf5909118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-46426", "type": "seen", "source": "https://t.me/hacking_Attack/54076", "content": "Exploit Collector\nPHPIPAM 1.4.4 Cross Site Request Forgery / Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nPHPIPAM version 1.4.4 suffers from cross site request forgery and cross site scripting vulnerabilities.\n\nSHA-256 | 050c77ae0f13a5b4247218de44f8bf133ca516aae7da4d73aba802231bdde893\n\nDownload\n=====[ Tempest Security Intelligence - ADV-03/2022\n]==========================\n\nPHPIPAM - Version 1.4.4\n\nAuthor: Rodolfo Tavares\n\nTempest Security Intelligence - Recife, Pernambuco - Brazil\n\n=====[ Table of Contents ]==================================================\n\n* Overview\n* Detailed description\n* Timeline of disclosure\n* Thanks & Acknowledgements\n* References\n\n=====[ Vulnerability Information\n]=============================================\n\n* Class: Improper Neutralization of Input During Web Page Generation\n('Cross-Site Scripting') [CWE-79]\n* CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L\n\n* Class: Cross-Site Request Forgery (CSRF) [CWE-352]\n* CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L\n=====[ Overview ]========================================================\n\n* System affected: PHPIPAM - Version 1.4.4\n* Software Version: Version 1.4.4 (other versions may also be affected).\n* Impact: PHPIPAM 1.4.4 is vulnerable to Cross-Site Request Forgery (CSRF)\nand Cross-Site Scripting (XSS) via\napp/admin/subnets/find_free_section_subnets.php. An attacker can exploit\nthis by injecting javascript code to coerce an admin user into performing\nunintended actions.\n\n=====[ Detailed description\n]=================================================\n\nThe html codes below exploit vulnerabilities in the same way due to the\nfact that both forms do not contain CSRF tokens and are vulnerable to XSS\nattacks. Then an attacker can host the forms on their malicious host and\ntrick an administrator into visiting your page. If successful, the\njavascript code will execute.\n\n* [app/admin/subnets/find_free_section_subnets.php]\nExploit PHPIPAM \nmethod=\"POST\">\nrodnt\"\n/>\n=====[ Timeline of disclosure\n]===============================================\n\n13/Jan/2022 - Responsible disclosure was initiated with the vendor;\n\n14/Jan/2022 - PHPIPAM confirmed the issues;\n\n17/Jan/2022 - The vendor fixed the issues XSS and CSRF;\n\n24/Mar/2022 - CVE reserved as CVE-2021-46426;\n\n25/Mar/2022 - CVE assigned [5].\n\n=====[ Thanks & Acknowledgements ]========================================\n\n* Tempest Security Intelligence [4]\n\n=====[ References ]=====================================================\n\n[1] [\nhttps://cwe.mitre.org/data/definitions/352.html|https://cwe.mitre.org/data/definitions/352.html\n]\n\n[2] [\nhttps://cwe.mitre.org/data/definitions/79.html|https://cwe.mitre.org/data/definitions/79.html\n]\n\n[3] [\nhttps://github.com/phpipam/phpipam/commit/6c1f72816d6ac634e9c174057e008717d959f351|https://github.com/phpipam/phpipam/commit/6c1f72816d6ac634e9c174057e008717d959f351\n]\n\n[4] [https://www.tempest.com.br|https://www.tempest.com.br/]\n\n[5] [\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46426|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46426\n]\n\n[6][ Thanks to Celso (CGB) =)]\n\n=====[ EOF ]===========================================================\n\n--\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:38.113727Z"}, {"uuid": "e26e7093-eb55-4d38-b5b3-0383daf66e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-46426", "type": "seen", "source": "https://t.me/hacking_Attack/54076", "content": "Exploit Collector\nPHPIPAM 1.4.4 Cross Site Request Forgery / Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nPHPIPAM version 1.4.4 suffers from cross site request forgery and cross site scripting vulnerabilities.\n\nSHA-256 | 050c77ae0f13a5b4247218de44f8bf133ca516aae7da4d73aba802231bdde893\n\nDownload\n=====[ Tempest Security Intelligence - ADV-03/2022\n]==========================\n\nPHPIPAM - Version 1.4.4\n\nAuthor: Rodolfo Tavares\n\nTempest Security Intelligence - Recife, Pernambuco - Brazil\n\n=====[ Table of Contents ]==================================================\n\n* Overview\n* Detailed description\n* Timeline of disclosure\n* Thanks & Acknowledgements\n* References\n\n=====[ Vulnerability Information\n]=============================================\n\n* Class: Improper Neutralization of Input During Web Page Generation\n('Cross-Site Scripting') [CWE-79]\n* CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L\n\n* Class: Cross-Site Request Forgery (CSRF) [CWE-352]\n* CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L\n=====[ Overview ]========================================================\n\n* System affected: PHPIPAM - Version 1.4.4\n* Software Version: Version 1.4.4 (other versions may also be affected).\n* Impact: PHPIPAM 1.4.4 is vulnerable to Cross-Site Request Forgery (CSRF)\nand Cross-Site Scripting (XSS) via\napp/admin/subnets/find_free_section_subnets.php. An attacker can exploit\nthis by injecting javascript code to coerce an admin user into performing\nunintended actions.\n\n=====[ Detailed description\n]=================================================\n\nThe html codes below exploit vulnerabilities in the same way due to the\nfact that both forms do not contain CSRF tokens and are vulnerable to XSS\nattacks. Then an attacker can host the forms on their malicious host and\ntrick an administrator into visiting your page. If successful, the\njavascript code will execute.\n\n* [app/admin/subnets/find_free_section_subnets.php]\nExploit PHPIPAM \nmethod=\"POST\">\nrodnt\"\n/>\n=====[ Timeline of disclosure\n]===============================================\n\n13/Jan/2022 - Responsible disclosure was initiated with the vendor;\n\n14/Jan/2022 - PHPIPAM confirmed the issues;\n\n17/Jan/2022 - The vendor fixed the issues XSS and CSRF;\n\n24/Mar/2022 - CVE reserved as CVE-2021-46426;\n\n25/Mar/2022 - CVE assigned [5].\n\n=====[ Thanks & Acknowledgements ]========================================\n\n* Tempest Security Intelligence [4]\n\n=====[ References ]=====================================================\n\n[1] [\nhttps://cwe.mitre.org/data/definitions/352.html|https://cwe.mitre.org/data/definitions/352.html\n]\n\n[2] [\nhttps://cwe.mitre.org/data/definitions/79.html|https://cwe.mitre.org/data/definitions/79.html\n]\n\n[3] [\nhttps://github.com/phpipam/phpipam/commit/6c1f72816d6ac634e9c174057e008717d959f351|https://github.com/phpipam/phpipam/commit/6c1f72816d6ac634e9c174057e008717d959f351\n]\n\n[4] [https://www.tempest.com.br|https://www.tempest.com.br/]\n\n[5] [\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46426|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46426\n]\n\n[6][ Thanks to Celso (CGB) =)]\n\n=====[ EOF ]===========================================================\n\n--\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.590380Z"}]}