Skip to content

CVE-2017-9436 TeamPass SQL injection in users.queries.php

CriticalCVSS 9.8 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

Affected products

ProductAffected versionsFixed in
nilsteampassnet/teampass(Packagist) < 2.1.27.5 2.1.27.5
nilsteampassnet/teampass(Packagist) = 2.1.21 No fix listed
nilsteampassnet/teampass(Packagist) = 2.1.26 No fix listed
nilsteampassnet/teampass(Packagist) = 2.1.27 No fix listed
teampass = 2.1.20.0 No fix listed
teampass = 2.1.22.0 No fix listed
teampass = 2.1.23.1 No fix listed
teampass = 2.1.23.2 No fix listed
teampass = 2.1.23.3 No fix listed
teampass = 2.1.23.4 No fix listed
teampass = 2.1.24.0 No fix listed
teampass = 2.1.24.1 No fix listed
teampass = 2.1.24.2 No fix listed
teampass = 2.1.24.3 No fix listed
teampass = 2.1.24.4 No fix listed
teampass = 2.1.25.0 No fix listed
teampass = 2.1.25.1 No fix listed
teampass = 2.1.25.2 No fix listed
teampass = 2.1.26 No fix listed
teampass = 2.1.26.0 No fix listed
teampass = 2.1.26.1 No fix listed
teampass = 2.1.26.2 No fix listed
teampass = 2.1.26.3 No fix listed
teampass = 2.1.26.4 No fix listed
teampass = 2.1.26.5 No fix listed
Show 18 more
ProductAffected versionsFixed in
teampass = 2.1.26.6 No fix listed
teampass = 2.1.26.7 No fix listed
teampass = 2.1.26.8 No fix listed
teampass = 2.1.26.9 No fix listed
teampass = 2.1.26.10 No fix listed
teampass = 2.1.26.11 No fix listed
teampass = 2.1.26.12 No fix listed
teampass = 2.1.26.13 No fix listed
teampass = 2.1.26.14 No fix listed
teampass = 2.1.26.15 No fix listed
teampass = 2.1.26.16 No fix listed
teampass = 2.1.26.17 No fix listed
teampass = 2.1.26.18 No fix listed
teampass = 2.1.26.19 No fix listed
teampass = 2.1.27.0 No fix listed
teampass = 2.1.27.1 No fix listed
teampass = 2.1.27.2 No fix listed
teampass = 2.1.27.3 No fix listed

References