PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-23046.json"