CVE-2017-15278

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

Cross site scripting

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-15278

CVE-2017-15278 affects TeamPass versions prior to 2.1.27.9. The vulnerability is a cross-site scripting (XSS) issue caused by insufficient filtration of data in the code path /sources/folders.queries.php, allowing an attacker to inject arbitrary HTML/script in a user’s browser when visiting the v...

CVE-2017-15278

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

TeamPass Cross-Site Scripting Vulnerability (CNVD-2017-30335)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site scripting vulnerability exists in versions prior to TeamPass 2.1.27.9 that stems from the program failing to adequately filter data. A remote attacker can exploit this vulnerability to execute arbitrary HTML or scrip...

Cross-site Scripting (XSS)

nilsteampassnet/teampass is susceptible to cross-site scripting XSS attacks. The attacks can be launched due to not sanitizing values in users.queries.php...

TeamPass SQL Injection Vulnerability (CNVD-2017-11316)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A SQL injection vulnerability exists in the users.queries.php file in versions of TeamPass prior to 2.1.27.4. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

SQL Injection

Teampass is vulnerable to SQL Injection. A malicious user can inject and execute arbitrary sql through the users.queries.php page due to the lack of sanitization of input parameters...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

Sql injection

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

Affected product: TeamPass. Vulnerable component: users.queries.php. Root cause: SQL injection in the users.queries.php path as described across multiple sources (TeamPass

SQL Injection

teampass is vulnerable to SQL Injection. The library does not sanitize the id parameter in the item.query.php file, allowing a malicious user to inject and execute arbitrary SQL...

Cross-site Request Forgery (CSRF)

teampass is vulnerable to a cross-site request forgery CSRF attacks. The library does not use an anti-csrf token to prevent cross-site request forgery, allowing a malicious user to trick an authenticated user to execute malicious action on their behalf...

Cross-site Scripting (XSS)

teampass is vulnerable to cross-site scripting XSS. The library does not sanitize input string for the role and labels fields. This allows a malicious user to inject and execute arbitrary php script...

TeamPass SQL Injection Vulnerability (CNVD-2017-06059)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A SQL injection vulnerability exists in several scripts in TeamPass 2.1.24 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

TeamPass Cross-Site Request Forgery Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site request forgery vulnerability exists in TeamPass 2.1.24 and earlier versions. A remote attacker can exploit this vulnerability to hijack authentication and perform unauthorized operations...

TeamPass < 2.1.25 Multiple Vulnerabilities (Jan 2016)

TeamPass is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"; ifdescription...

Sql injection

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...