PT-2019-13048

Name of the Vulnerable Software and Affected Versions TeamPass version 2.1.27.35 Description An issue was discovered in the "Import items" feature of the sources/items.queries.php file, allowing an attacker to load a crafted CSV file with an XSS payload. Recommendations For TeamPass version...

CVE-2017-15055

TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php. It is then possible to copy any arbitrary item into a directory controlled by the attacker, edit any item within a read-only directory, delete an arbitrary item, delete the file attachments o...

CVE-2017-15055: Improper Privilege Management

TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php. It is then possible to copy any arbitrary item into a directory controlled by the attacker, edit any item within a read-only directory, delete an arbitrary item, delete the file attachments o...

PT-2017-13840

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows an authenticated attacker to bypass access control when requesting items.queries.php, enabling them to perform various unauthorized actions. These actions include copying any ite...