Description
phpIPAM是一款开源的IP地址管理工具，旨在帮助网络管理员高效管理IP地址和子网。phpIPAM的find_full_subnets.php脚本以及/functions/scripts/find_full_subnets.php路径存在未授权访问漏洞（CVE-2023-0678）。攻击者可以利用该漏洞在未授权的情况下访问敏感信息，可能导致信息泄露或进一步的攻击。
phpipam /functions/scripts/find_full_subnets.php 未授权访问漏洞 （CVE-2023-0678）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-0678
https://github.com/phpipam/phpipam/commit/1960bd24e8a55796da066237cf11272c44bb1cc4
https://huntr.dev/bounties/8d299377-be00-46dc-bebe-3d439127982f
https://cve.imfht.com/detail/CVE-2023-0678
https://pentest-tools.com/vulnerabilities-exploits/phpipam-v151-missing-authorization_22591
https://phpipam.net/documents/changelog/