Security Advisory

CVE-2014-3773

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-08-07 10:00:00

Last updated 2024-08-06 10:57:16

Assigner mitre

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to execute arbitrary SQL commands via the login parameter in a (1) send_pw_by_email or (2) generate_new_password action in sources/main.queries.php; iDisplayStart parameter to (3) datatable.logs.php or (4) a file in source/datatable/; or iDisplayLength parameter to (5) datatable.logs.php or (6) a file in source/datatable/; or allow remote authenticated users to execute arbitrary SQL commands via a sSortDir_ parameter to (7) datatable.logs.php or (8) a file in source/datatable/.

← Browse all CVEs View on cve.org ↗