CVE-2017-15054

An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to tamper with parameters of a request to upload.files.php, in...

CVE-2017-15052

CVE-2017-15052 affects TeamPass prior to 2.1.27.9. An authenticated manager can bypass access control in requests to delete or modify users via users.queries.php by tampering parameters (e.g., changing the id in delete_user). The root cause is improper enforcement of manager-level permissions, al...

CVE-2017-15051

Multiple stored cross-site scripting XSS vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the 1 URL value of an item or 2 user log history. To exploit the vulnerability, the attacker must be first authenticated to the...

CVE-2017-15051

Summary: CVE-2017-15051 affects TeamPass prior to 2.1.27.9 with multiple stored XSS vulnerabilities. An authenticated attacker can inject script/html via (1) an item URL value or (2) user log history, potentially affecting administrators when they view logs. Root cause: stored XSS in these fields...

PT-2017-13840

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows an authenticated attacker to bypass access control when requesting items.queries.php, enabling them to perform various unauthorized actions. These actions include copying any ite...

PT-2017-13839

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows remote authenticated users to upload arbitrary files, leading to remote command execution. To exploit this, an attacker must tamper with parameters of a request to...

PT-2017-13838

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows a manager user to modify or delete any arbitrary roles within the application due to improper access control enforcement when requesting roles.queries.php. To exploit this, an...

CVE-2017-15054: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to tamper with parameters of a request to upload.files.php, in...

CVE-2017-15052: Improper Privilege Management

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user including admin, or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an...

PT-2017-13836

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows authenticated remote attackers to inject arbitrary web script or HTML. This can be achieved via the URL value of an item or user log history. To exploit, the attacker must first ...

PT-2017-13837

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows a manager user to delete or modify attributes of any arbitrary user, except for the administrator, by tampering with requests sent directly to the users.queries.php endpoint. Thi...

CVE-2017-15051: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the 1 URL value of an item or 2 user log history. To exploit the vulnerability, the attacker must be first authenticated to the...

CVE-2017-15055: Improper Privilege Management

TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php. It is then possible to copy any arbitrary item into a directory controlled by the attacker, edit any item within a read-only directory, delete an arbitrary item, delete the file attachments o...

CVE-2017-15053: Improper Privilege Management

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have...

Cross-site Scripting (XSS)

nilsteampassnet/teampass is susceptible to cross-site scripting XSS attacks. The attack can be launched by injecting malicious code via /sources/folders.queries.php...

CVE-2017-15278

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

Cross site scripting

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-15278

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-15278

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-15278

CVE-2017-15278 affects TeamPass versions prior to 2.1.27.9. The vulnerability is a cross-site scripting (XSS) issue caused by insufficient filtration of data in the code path /sources/folders.queries.php, allowing an attacker to inject arbitrary HTML/script in a user’s browser when visiting the v...