CVE-2015-7564

CVE-2015-7564 affects TeamPass versions up to 2.1.24 (and earlier). The vulnerability is a SQL injection in multiple scripts: specifically via the 1) id parameter in item.query.php (action_on_quick_icon) and 2) order or 3) direction parameters in view.query.php under the connections_logs, errors_...

TeamPass Default Admin Credentials (HTTP)

TeamPass is using default admin credentials for the web login. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...

Teampass 2.1.26.8: Unauthenticated SQL Injection

RIPS Analysis RIPS was able to analyze the whole project consisting of 140,000 lines of code in only 25 seconds, uncovering a lot of severe security vulnerabilities. The two main types of issues was SQL injection and file inclusion. Luckily, most of the SQL injections were found in the installati...

TeamPass Detection (HTTP)

HTTP based detection of TeamPass. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106165";...

TeamPass <= 2.1.25 Arbitrary File Download and Unauthenticated Blind SQL Injection Vulnerability

TeamPass is prone to an arbitrary file download vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...

TeamPass 'users.queries.php' SQL Injection Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. TeamPass suffers from a SQL injection vulnerability that can be exploited by remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

TeamPass SQL Injection Vulnerability (CNVD-2016-04930)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. TeamPass has a SQL injection vulnerability in sources/items.series.php. In a "sendemail" request, when the condition "$POST'cat' == "sharethisitem"" is successful, the POST parameter "id" is unescaped, which can lead to SQL...

TeamPass Passwords Management System 2.1.26 - Arbitrary File Download

Exploit for php platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: TeamPass Passwords Management System via Unauth File Download and Arbitrary File Download Application: TeamPass Passwords Management System Class: Sensitive Information...

TeamPass SQL Injection Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A SQL injection vulnerability exists in TeamPass versions 2.1.26, 2.1.25, and 2.1.24, which stems from the program failing to properly filter user-submitted input when constructing SQL query statements. An attacker could use this...

Teampass 2.1.26 Arbitrary File Upload

Document Title: =============== Teampass 2.1.26 - Authenticated File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1866 Release Date: ============= 2016-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Teampass 2.1.26 - Authenticated File Upload Vulnerability

Document Title: =============== Teampass 2.1.26 - Authenticated File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1866 Release Date: ============= 2016-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Teampass v2.1.26 - Privilege Escalate Vulnerability

Document Title: =============== Teampass v2.1.26 - Privilege Escalate Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1859 Release Date: ============= 2016-07-05 Vulnerability Laboratory ID VL-ID: ==================================== 1859...

Teampass 2.1.26 - Authenticated File Upload Vulnerability

Document Title: =============== Teampass 2.1.26 - Authenticated File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1866 Release Date: ============= 2016-07-05 Vulnerability Laboratory ID VL-ID: ====================================...

Teampass v2.1.26 - Privilege Escalate Vulnerability

Document Title: =============== Teampass v2.1.26 - Privilege Escalate Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1859 Release Date: ============= 2016-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 1859...

Teampass Unauthenticated Access Vulnerability

TeamPass is a web-based open source application. An unauthenticated access vulnerability exists in TeamPass. A remote attacker is able to access information in the database management system...

Teampass Arbitrary File Download Vulnerability

TeamPass is a web-based open source application. An arbitrary file download vulnerability exists in TeamPass. An unauthenticated remote attacker can download arbitrary files via a GET method request...

Teampass Cross-Site Scripting Vulnerability

TeamPass is a web-based open source application. TeamPass suffers from a cross-site scripting vulnerability. An attacker is able to inject malicious script code...

Teampass 2.1.25 Arbitrary File Download

Document Title: =============== Teampass v2.1.25 - Arbitrary File Download Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1843 Release Date: ============= 2016-05-17 Vulnerability Laboratory ID VL-ID: ====================================...

Teampass 2.1.25 Unauthenticated Access

Document Title: =============== Teampass v2.1.25 - Unauthenticated Access Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1844 Release Date: ============= 2016-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability

Document Title: =============== Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1845 Release Date: ============= 2016-05-24 Vulnerability Laboratory ID VL-ID: ==================================...