CVE-2020-12479

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal...

CVE-2020-12479

VULNERABILITY SUMMARY: TeamPass 2.1.27.36 is affected by a PHP file include (directory traversal) vulnerability triggered through crafted HTTP requests to sources/users.queries.php with the newValue parameter. The issue allows any authenticated TeamPass user to cause inclusion of arbitrary files,...

TeamPass Cross-Site Scripting Vulnerability (CNVD-2019-41894)

TeamPass is an open source password manager. TeamPass suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute client-side code...

TeamPass Cross-Site Scripting Vulnerability (CNVD-2019-41893)

TeamPass is an open source password manager. TeamPass suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute client-side code...

Cross-site Scripting (XSS)

nilsteampassnet/TeamPass is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of password is not sanitized when displayed in a preview from a search result...

Cross-Site Scripting (XSS)

nilsteampassnet/TeamPass is vulnerable to cross-site scripting XSS. The vulnerability exists as the values of label in viewslogs.php is not sanitized...

Cross-Site Scripting (XSS)

nilsteampassnet/TeamPass is vulnerable to cross-site scripting XSS. The vulnerability exists as the values stored in label was not sanitized in a new Knowledge Base item...

CVE-2019-17205

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2019-17204

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

CVE-2019-17204

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

CVE-2019-17205

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2019-17203

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

CVE-2019-17203

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

CVE-2019-17203

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

CVE-2019-17203

CVE-2019-17203 affects TeamPass 2.1.27.36 and enables Stored XSS on the Search page when a crafted password is used for an item in any folder. Root cause noted in sources as the password value not being sanitized when shown in a search preview; no remediation details are provided in the supplied ...

CVE-2019-17204

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

CVE-2019-17204

CVE-2019-17204 affects TeamPass 2.1.27.36 and is a Stored XSS vulnerability triggered by setting a crafted Knowledge Base label and adding any available item. The root cause, per Veracode, is that the values stored in the label field were not sanitized, enabling script execution in the victim’s b...