vendor:
TeamPass
by:
Max Meyer - Rivendell
6.1
CVSS
HIGH
SQL Injection
89
CWE
Product Name: TeamPass
Affected Version From: 2.1.24
Affected Version To: 2.1.24
Patch Exists: NO
Related CWE: CVE-2023-1545
CPE: a:teampassnet:teampass:2.1.24
Other Scripts:
https://www.infosecmatter.com/nessus-plugin-library/
Platforms Tested: Windows, Linux
2025
TeamPass SQL Injection
The exploit allows an attacker to execute SQL queries through the vulnerability. By injecting malicious SQL code into the login field, an attacker can retrieve sensitive information from the database. This vulnerability has been assigned CVE-2023-1545.
Mitigation:
Ensure input validation is performed on user-supplied data to prevent SQL injection attacks. Regularly update to the latest version of the software to apply security patches.
