Lucene search
Veracode Vulnerability DatabaseVERACODE:5494HistoryNov 28, 2017 - 8:08 a.m.
Remote Code Execution (RCE) Through Arbitrary File Upload
2017-11-2808:08:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.003 Low
EPSS
Percentile
68.0%
nilsteampassnet/teampass is vulnerable to remote code execution (RCE) attacks. A malicious user can modify the the parameters in a HTTP request to upload.files.php to upload an arbitrary file that when accessed on the server is executed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nilsteampassnet/teampass | le | 2.1.28.x-dev |
Related
prion
prion
Privilege escalation
2017-11-27 19:29:00
osv
osv
CVE-2017-15054
2017-11-27 19:29:00
TeamPass arbitrary file upload vulnerability
2022-05-17 00:17:47
cvelist
cvelist
CVE-2017-15054
2017-11-27 19:00:00
nvd
nvd
CVE-2017-15054
2017-11-27 19:29:00
cve
cve
CVE-2017-15054
2017-11-27 19:29:00
github
github
TeamPass arbitrary file upload vulnerability
2022-05-17 00:17:47
openvas
openvas
TeamPass < 2.1.27.9 Multiple Vulnerabilities (Nov 2017)
2017-11-28 00:00:00