Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-23046 — SQL Injection Vulnerability on PhpIPAM v1.4.4 | Kitploit
Tools/GitHubGitHub/dnr6419/cve-2022-23046
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubdnr6419/cve-2022-23046

CVE-2022-23046

SQL Injection Vulnerability on PhpIPAM v1.4.4

View Repository
4314 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-23046

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php.

Installation

  1. Build
root@kitploit:~
git clone https://github.com/dnr6419/CVE-2022-23046.git
cd CVE-2022-23046 && docker-compose up -d 
pip3(or pip) install -r requirements.txt
python3(or python) CVE-2022-23046.py -h
  1. Setup 2-1. Go to the http://[YOUR_IP] and Choose [New phpipam installation].

2-2. Choose [Automatic database installation].
2-3. MySQL username & Password is "root"/"my_secret_mysql_root_pass".
2-4. Setting the Password and Login to check the installation is complete.

Exploit

root@kitploit:~
  python3 CVE-2022-23046.py --url http://localhost --user admin
  # and input your password
Download Tool

Reference

https://github.com/jcarabantes/CVE-2022-23046.git
https://hub.docker.com/r/phpipam/phpipam-www