Package · Packagist

nilsteampassnet/teampass

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

High 8.1

CVE-2023-3009 Public exploit

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist

May 31, 2023
High 7.1

CVE-2023-2859 Public exploit

Code Injection in nilsteampassnet/teampass

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist

May 24, 2023
High 7.1

CVE-2023-2591 Public exploit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7.

nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist

May 9, 2023
Medium 5.4

CVE-2023-2516 Public exploit

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.

nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist

May 5, 2023
High 7.5

CVE-2023-1545 Public exploit

SQL Injection in nilsteampassnet/teampass

SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist

Mar 21, 2023
Critical 9.8

CVE-2015-7564 Public exploit

TeamPass vulnerable to SQL Injection

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) c…

nilsteampassnet/teampass Packagist

Apr 12, 2017
Medium 6.1

CVE-2015-7562 Public exploit

TeamPass vulnerable to Cross-site Scripting

Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

nilsteampassnet/teampass Packagist

Apr 12, 2017