Skip to content
OpenAdvisories

Package · Packagist

nilsteampassnet/teampass

42 known vulnerabilities.

42 results · Feed

  • Critical 9.8
    CVE-2015-7564 Public exploit

    TeamPass vulnerable to SQL Injection

    Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) c…

  • Medium 6.1
    CVE-2015-7562 Public exploit

    TeamPass vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.