TeamPass Path Traversal Vulnerability

TeamPass is an open source password manager from the developers of NILS LAUMAILL? software. A security vulnerability exists in TeamPass version 2.1.27.36. An attacker can exploit the vulnerability by sending an HTTP request with the 'newValue' parameter to the sources/users.series.php file to...

PT-2020-13138

Name of the Vulnerable Software and Affected Versions TeamPass version 2.1.27.36 Description The issue allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php using newValue directory traversal. Recommendations F...