TeamPass vulnerabilities

TeamPass versions before 2.1.27.9 do not properly enforce item access control in items.queries.php. This allows an attacker to copy arbitrary items, edit them in read-only directories, delete items, and access the history and attributes of directories.

An arbitrary file upload vulnerability in TeamPass before version 2.1.27.9 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution.

CVE-2015-7563 describes a CSRF vulnerability in TeamPass version 2.1.24 and earlier that allows remote attackers to hijack the authentication of an authenticated user.

Multiple SQL injection vulnerabilities in TeamPass before version 2.1.20 allow remote attackers to execute arbitrary SQL commands through various parameters in PHP files.

TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key.

TeamPass before version 2.1.20 allows remote attackers to bypass access restrictions via the language file path in a request to index.php or in a 'change_user_language' request to sources/main.queries.php.

TeamPass versions before 2.1.27.4 are vulnerable to a SQL injection in users.queries.php.