Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an authenticated user...

CVE-2015-7564

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

CVE-2015-7562

TeamPass 2.1.24 and earlier are affected by CVE-2015-7562, a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script or HTML via the label value of an item or the name of a role. The affected component is the TeamPass application (versions up to and includ...

CVE-2015-7564

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an actiononquickicon action to item.query.php or the 2 order or 3 direction parameter in an a connectionslogs, b errorslogs or c accesslogs acti...

CVE-2015-7564

CVE-2015-7564 affects TeamPass versions up to 2.1.24 (and earlier). The vulnerability is a SQL injection in multiple scripts: specifically via the 1) id parameter in item.query.php (action_on_quick_icon) and 2) order or 3) direction parameters in view.query.php under the connections_logs, errors_...

CVE-2015-7563

Cross-site request forgery CSRF vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an authenticated user...

CVE-2015-7563

CVE-2015-7563 is a CSRF vulnerability in TeamPass 2.1.24 and earlier that allows an attacker to hijack an authenticated user’s session and perform unauthorized actions. Public references confirm vulnerable versions up to 2.1.24, with exploitation documented (exploit-db) and remediation noted as u...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

TeamPass Default Admin Credentials (HTTP)

TeamPass is using default admin credentials for the web login. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...

Teampass 2.1.26.8: Unauthenticated SQL Injection

RIPS Analysis RIPS was able to analyze the whole project consisting of 140,000 lines of code in only 25 seconds, uncovering a lot of severe security vulnerabilities. The two main types of issues was SQL injection and file inclusion. Luckily, most of the SQL injections were found in the installati...

TeamPass Detection (HTTP)

HTTP based detection of TeamPass. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106165";...

TeamPass <= 2.1.25 Arbitrary File Download and Unauthenticated Blind SQL Injection Vulnerability

TeamPass is prone to an arbitrary file download vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...

TeamPass 'users.queries.php' SQL Injection Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. TeamPass suffers from a SQL injection vulnerability that can be exploited by remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

TeamPass SQL Injection Vulnerability (CNVD-2016-04930)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. TeamPass has a SQL injection vulnerability in sources/items.series.php. In a "sendemail" request, when the condition "$POST'cat' == "sharethisitem"" is successful, the POST parameter "id" is unescaped, which can lead to SQL...

TeamPass Passwords Management System 2.1.26 - Arbitrary File Download

Exploit for php platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: TeamPass Passwords Management System via Unauth File Download and Arbitrary File Download Application: TeamPass Passwords Management System Class: Sensitive Information...

TeamPass SQL Injection Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A SQL injection vulnerability exists in TeamPass versions 2.1.26, 2.1.25, and 2.1.24, which stems from the program failing to properly filter user-submitted input when constructing SQL query statements. An attacker could use this...

Teampass 2.1.26 Arbitrary File Upload

Document Title: =============== Teampass 2.1.26 - Authenticated File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1866 Release Date: ============= 2016-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Teampass 2.1.26 - Authenticated File Upload Vulnerability

Document Title: =============== Teampass 2.1.26 - Authenticated File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1866 Release Date: ============= 2016-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Teampass v2.1.26 - Privilege Escalate Vulnerability

Document Title: =============== Teampass v2.1.26 - Privilege Escalate Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1859 Release Date: ============= 2016-07-05 Vulnerability Laboratory ID VL-ID: ==================================== 1859...