Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 12:17 a.m.22 views

TeamPass stored cross-site scripting (XSS) vulnerability

Multiple stored cross-site scripting XSS vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the 1 URL value of an item or 2 user log history. To exploit the vulnerability, the attacker must be first authenticated to the...

5.4CVSS5AI score0.00955EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2017/11/28 12:0 a.m.7 views

Multiple Cross-Site Scripting Vulnerabilities in TeamPass

TeamPass is a dedicated password manager for Apache, MySQL and PHP. Multiple cross-site scripting vulnerabilities exist in versions of TeamPass prior to 2.1.27.9. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of an item's URL value or user l...

5.4CVSS6.1AI score0.00955EPSS
Exploits1References1
NVD
NVD
added 2017/11/27 7:29 p.m.30 views

CVE-2017-15051

Multiple stored cross-site scripting XSS vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the 1 URL value of an item or 2 user log history. To exploit the vulnerability, the attacker must be first authenticated to the...

5.4CVSS5.2AI score0.00955EPSS
Exploits1References2
OSV
OSV
added 2017/11/27 7:29 p.m.15 views

CVE-2017-15051

Multiple stored cross-site scripting XSS vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the 1 URL value of an item or 2 user log history. To exploit the vulnerability, the attacker must be first authenticated to the...

5.4CVSS5.1AI score
Exploits0References2
Prion
Prion
added 2017/11/27 7:29 p.m.19 views

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the 1 URL value of an item or 2 user log history. To exploit the vulnerability, the attacker must be first authenticated to the...

3.5CVSS5.1AI score0.00955EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2017/11/27 7:0 p.m.35 views

CVE-2017-15051

Multiple stored cross-site scripting XSS vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the 1 URL value of an item or 2 user log history. To exploit the vulnerability, the attacker must be first authenticated to the...

5.6AI score0.00955EPSS
Exploits1References2
Rows per page
Query Builder