Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2019-17203

CVE-2019-17203 affects TeamPass 2.1.27.36 and enables Stored XSS on the Search page when a crafted password is used for an item in any folder. Root cause noted in sources as the password value not being sanitized when shown in a search preview; no remediation details are provided in the supplied ...

CVE-2019-17203

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

CVE-2019-17204

CVE-2019-17204 affects TeamPass 2.1.27.36 and is a Stored XSS vulnerability triggered by setting a crafted Knowledge Base label and adding any available item. The root cause, per Veracode, is that the values stored in the label field were not sanitized, enabling script execution in the victim’s b...

CVE-2019-17204

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

CVE-2019-17205

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2019-17205

The CVE-2019-17205 entry affects TeamPass 2.1.27.36 and describes a Stored XSS vulnerability: an attacker can place an XSS payload in the username field during login, with the payload executing when an administrator views the log of failed logins. This is the concrete vulnerability described acro...

CVE-2019-17204: Improper Neutralization of Input During Web Page Generation

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item...

PT-2019-14998

Name of the Vulnerable Software and Affected Versions TeamPass version 2.1.27.36 Description The issue allows for Stored XSS at the Search page. This occurs by setting a crafted password for an item in any folder. Recommendations For version 2.1.27.36, consider restricting access to the Search pa...

CVE-2019-17203: Improper Neutralization of Input During Web Page Generation

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder...

PT-2019-14999

Name of the Vulnerable Software and Affected Versions TeamPass version 2.1.27.36 Description The issue allows for Stored XSS by setting a crafted Knowledge Base label and adding any available item. Recommendations For TeamPass version 2.1.27.36, update to a version that fixes this issue, as no...

PT-2019-15000

Name of the Vulnerable Software and Affected Versions TeamPass version 2.1.27.36 Description The issue allows for Stored XSS by placing a payload in the username field during a login attempt. When an administrator views the log of failed logins, the XSS payload will be executed. Recommendations F...

CVE-2019-17205: Improper Neutralization of Input During Web Page Generation

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2019-16904

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...

CVE-2019-16904

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...

Cross site scripting

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...

CVE-2019-16904

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...

CVE-2019-16904

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. The crafted password is exploitable when viewing the change history of the item or tapping on the item...