Beveiligingsadvies

CVE-2015-7564

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-04-12 22:00:00
Laatst bijgewerkt 2024-08-06 07:51:28
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) connections_logs, (b) errors_logs or (c) access_logs action to view.query.php.