TeamPass upload.files.php file arbitrary file upload vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. An arbitrary file upload vulnerability exists in versions of TeamPass prior to 2.1.27.9. A remote attacker can exploit this vulnerability by tampering with the parameters in a request sent to the upload.files.php file to upload...

CVE-2017-15054

An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to tamper with parameters of a request to upload.files.php, in...

PT-2017-13839

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows remote authenticated users to upload arbitrary files, leading to remote command execution. To exploit this, an attacker must tamper with parameters of a request to...

CVE-2017-15054: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to tamper with parameters of a request to upload.files.php, in...

CVE-2014-3772: Undefined Security Weakness

TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the sessionstart function before checking the CPM key, as demonstrated by a request to sources/upload/upload.files.php...

PT-2014-5489

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.20 Description The issue allows remote attackers to bypass access restrictions. This can be achieved by sending a request to "index.php" followed by a direct request to a file that calls the session start functio...