CVE-2019-16692

This exploit demonstrates a SQL injection vulnerability in phpIPAM 1.4 by leveraging the `updatexml` function to extract database information. It authenticates as an admin and injects payloads into the `table` parameter of the custom field filter.

This repository contains a functional Python exploit for CVE-2019-16692, a SQL injection vulnerability in phpIPAM 1.4. The exploit leverages the `updatexml` function to extract database information via error-based SQLi.