CVE-2012-2234

CVE-2012-2234 corresponds to a Cross‑Site Scripting (XSS) flaw in TeamPass prior to 2.1.6, exposed in sources/users.queries.php during the add_new_user action. The vulnerability allows remote authenticated users to inject arbitrary web script or HTML by manipulating the login parameter, with the ...

ETeamPass 2.1.5 Cross Site Scripting

Title: ETeamPass v2.1.5 users.queries.php Persistent Cross-Site Scripting XSS Type: Remote Severity: Medium Impact: Direct execution of arbitrary code in the context of Webserver user. Release Date: 16.04.2012 CVE: CVE-2012-2234 Author: Marcos Garcia @artsweb Release mode: Coordinated release...