CVE-2017-15278

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-15278: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

PT-2017-13963

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description A Cross-Site Scripting XSS issue was found due to insufficient data filtration in the /sources/folders.queries.php file. This allows an attacker to execute arbitrary HTML and script code in a...

TeamPass Cross-Site Scripting Vulnerability (CNVD-2017-30335)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site scripting vulnerability exists in versions prior to TeamPass 2.1.27.9 that stems from the program failing to adequately filter data. A remote attacker can exploit this vulnerability to execute arbitrary HTML or scrip...

Cross-site Scripting (XSS)

nilsteampassnet/teampass is susceptible to cross-site scripting XSS attacks. The attacks can be launched due to not sanitizing values in users.queries.php...

TeamPass SQL Injection Vulnerability (CNVD-2017-11316)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A SQL injection vulnerability exists in the users.queries.php file in versions of TeamPass prior to 2.1.27.4. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

SQL Injection

Teampass is vulnerable to SQL Injection. A malicious user can inject and execute arbitrary sql through the users.queries.php page due to the lack of sanitization of input parameters...

Sql injection

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

Affected product: TeamPass. Vulnerable component: users.queries.php. Root cause: SQL injection in the users.queries.php path as described across multiple sources (TeamPass

PT-2017-4147

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.5 Description The issue is related to insufficient protection of the SQL query structure in the users.queries.php component of the TeamPass password manager. This can allow a remote attacker to execute arbitra...

CVE-2017-9436: Improper Neutralization of Special Elements used in an SQL Command

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

SQL Injection

teampass is vulnerable to SQL Injection. The library does not sanitize the id parameter in the item.query.php file, allowing a malicious user to inject and execute arbitrary SQL...

Cross-site Request Forgery (CSRF)

teampass is vulnerable to a cross-site request forgery CSRF attacks. The library does not use an anti-csrf token to prevent cross-site request forgery, allowing a malicious user to trick an authenticated user to execute malicious action on their behalf...

Cross-site Scripting (XSS)

teampass is vulnerable to cross-site scripting XSS. The library does not sanitize input string for the role and labels fields. This allows a malicious user to inject and execute arbitrary php script...

TeamPass Cross-Site Request Forgery Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site request forgery vulnerability exists in TeamPass 2.1.24 and earlier versions. A remote attacker can exploit this vulnerability to hijack authentication and perform unauthorized operations...

TeamPass SQL Injection Vulnerability (CNVD-2017-06059)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A SQL injection vulnerability exists in several scripts in TeamPass 2.1.24 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...