CVE-2019-16693

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• phpIPAM 1.4 - SQL-Injection2025-12-03 · webapps · php

Impact

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2019-16693.md
• https://github.com/phpipam/phpipam/issues/2738
• https://github.com/phpipam/phpipam/issues/2738