SQL Injection

teampass is vulnerable to SQL Injection. The library does not sanitize the id parameter in the item.query.php file, allowing a malicious user to inject and execute arbitrary SQL...

CVE-2015-7564

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...

PT-2017-7228

Name of the Vulnerable Software and Affected Versions TeamPass versions 2.1.24 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter in an action on quick icon action to "item.query.php", or the order or direction...

CVE-2015-7564: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...