teampass teampass vulnerabilities and exploits

(subscribe to this query)

668

VMScore

TeamPass prior to 2.1.20 allows remote malicious users to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key, as demonstrated by a request to sources/upload/upload.files.ph...

Teampass Teampass Teampass Teampass 2.1.18 Teampass Teampass 2.1 Teampass Teampass 2.1.5 Teampass Teampass 2.1.4 Teampass Teampass 2.1.3 Teampass Teampass 2.1.2 Teampass Teampass 2.1.15 Teampass Teampass 2.1.14 Teampass Teampass 2.1.13 Teampass Teampass 2.1.10 Teampass Teampass 2.1.1 Teampass Teampass 2.1.19

668

VMScore

TeamPass prior to 2.1.20 allows remote malicious users to bypass access restrictions via the language file path in a (1) request to index.php or (2) "change_user_language" request to sources/main.queries.php.

Teampass Teampass 2.1.4 Teampass Teampass 2.1.2 Teampass Teampass 2.1.13 Teampass Teampass 2.1 Teampass Teampass 2.1.5 Teampass Teampass Teampass Teampass 2.1.19 Teampass Teampass 2.1.18 Teampass Teampass 2.1.15 Teampass Teampass 2.1.3 Teampass Teampass 2.1.1 Teampass Teampass 2.1.14 Teampass Teampass 2.1.10

668

VMScore

Multiple SQL injection vulnerabilities in TeamPass prior to 2.1.20 allow remote malicious users to execute arbitrary SQL commands via the login parameter in a (1) send_pw_by_email or (2) generate_new_password action in sources/main.queries.php; iDisplayStart parameter to (3) data...

Teampass Teampass 2.1.5 Teampass Teampass 2.1.18 Teampass Teampass 2.1.14 Teampass Teampass 2.1.3 Teampass Teampass 2.1.2 Teampass Teampass 2.1.1 Teampass Teampass Teampass Teampass 2.1.10 Teampass Teampass 2.1 Teampass Teampass 2.1.4 Teampass Teampass 2.1.19 Teampass Teampass 2.1.15 Teampass Teampass 2.1.13

383

VMScore

Multiple cross-site scripting (XSS) vulnerabilities in items.php in TeamPass prior to 2.1.20 allow remote malicious users to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a (1) hid_cat or (2) open_folder form element, or (3) id para...

Teampass Teampass 2.1.3 Teampass Teampass 2.1.1 Teampass Teampass 2.1.14 Teampass Teampass 2.1.10 Teampass Teampass Teampass Teampass 2.1.19 Teampass Teampass 2.1.18 Teampass Teampass 2.1.15 Teampass Teampass 2.1.5 Teampass Teampass 2.1.4 Teampass Teampass 2.1.2 Teampass Teampass 2.1.13 Teampass Teampass 2.1

435

VMScore

Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass prior to 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the login parameter in an add_new_user action.

Teampass Teampass 2.1 Teampass Teampass 2.1.4 Teampass Teampass 2.1.3 Teampass Teampass Teampass Teampass 2.1.2 Teampass Teampass 2.1.1

1 EDB exploit

NA

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass before 3.0.9.

Teampass Teampass

NA

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass before 3.0.0.22.

Teampass Teampass

685

VMScore

Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and previous versions allows remote malicious users to hijack the authentication of an authenticated user.

Teampass Teampass

1 EDB exploit

NA

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass before 3.0.0.23.

Teampass Teampass

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook