Sql injection

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

Affected product: TeamPass. Vulnerable component: users.queries.php. Root cause: SQL injection in the users.queries.php path as described across multiple sources (TeamPass

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

SQL Injection

teampass is vulnerable to SQL Injection. The library does not sanitize the id parameter in the item.query.php file, allowing a malicious user to inject and execute arbitrary SQL...

Cross-site Request Forgery (CSRF)

teampass is vulnerable to a cross-site request forgery CSRF attacks. The library does not use an anti-csrf token to prevent cross-site request forgery, allowing a malicious user to trick an authenticated user to execute malicious action on their behalf...

Cross-site Scripting (XSS)

teampass is vulnerable to cross-site scripting XSS. The library does not sanitize input string for the role and labels fields. This allows a malicious user to inject and execute arbitrary php script...

TeamPass SQL Injection Vulnerability (CNVD-2017-06059)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A SQL injection vulnerability exists in several scripts in TeamPass 2.1.24 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

TeamPass Cross-Site Request Forgery Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site request forgery vulnerability exists in TeamPass 2.1.24 and earlier versions. A remote attacker can exploit this vulnerability to hijack authentication and perform unauthorized operations...

TeamPass < 2.1.25 Multiple Vulnerabilities (Jan 2016)

TeamPass is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"; ifdescription...

Sql injection

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an authenticated user...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

CVE-2015-7564

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...

CVE-2015-7563

Cross-site request forgery CSRF vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an authenticated user...

CVE-2015-7564

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

CVE-2015-7562

TeamPass 2.1.24 and earlier are affected by CVE-2015-7562, a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script or HTML via the label value of an item or the name of a role. The affected component is the TeamPass application (versions up to and includ...

CVE-2015-7563

CVE-2015-7563 is a CSRF vulnerability in TeamPass 2.1.24 and earlier that allows an attacker to hijack an authenticated user’s session and perform unauthorized actions. Public references confirm vulnerable versions up to 2.1.24, with exploitation documented (exploit-db) and remediation noted as u...