81197vdb entry
http://osvdb.org/81197 CVE-2012-2234
TeamPass 2.1.5 - 'login' HTML Injection
Record summary
CVE-2012-2234 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the login parameter in an add_new_user action.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBTeamPass 2.1.5 - 'login' HTML InjectionExploitDB exploitby Marcos GarciaNot analyzed1 file
References
6packetstormsecurity.org
http://packetstormsecurity.org/files/111905 53038vdb entry
http://www.securityfocus.com/bid/53038 teampass-usersqueries-xss(74910)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74910 github.com
https://github.com/nilsteampassnet/TeamPass/blob/master/readme.txt nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-2234