TeamPass SQL injection in users.queries.php

TeamPass before 2.1.27.5 is vulnerable to a SQL injection in users.queries.php...

GHSA-CM26-GP8J-W6XF TeamPass SQL injection in users.queries.php

TeamPass before 2.1.27.5 is vulnerable to a SQL injection in users.queries.php...

PT-2020-13138

Name of the Vulnerable Software and Affected Versions TeamPass version 2.1.27.36 Description The issue allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php using newValue directory traversal. Recommendations F...

CVE-2020-12479: Improper Limitation of a Pathname to a Restricted Directory

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal...

CVE-2017-15052

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user including admin, or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an...

CVE-2017-15052: Improper Privilege Management

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user including admin, or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an...

PT-2017-13837

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows a manager user to delete or modify attributes of any arbitrary user, except for the administrator, by tampering with requests sent directly to the users.queries.php endpoint. Thi...

Cross-site Scripting (XSS)

nilsteampassnet/teampass is susceptible to cross-site scripting XSS attacks. The attacks can be launched due to not sanitizing values in users.queries.php...

Sql injection

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

CVE-2017-9436: Improper Neutralization of Special Elements used in an SQL Command

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php...

PT-2017-4147

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.5 Description The issue is related to insufficient protection of the SQL query structure in the users.queries.php component of the TeamPass password manager. This can allow a remote attacker to execute arbitra...

PT-2012-3895

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.6 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the login parameter in an "add new user" action. This occurs in the...

CVE-2012-2234: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the login parameter in an addnewuser action...