CVE-2015-7564

CVE-2015-7564

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) connections_logs, (b) errors_logs or (c) access_logs action to view.query.php.

CVSS 9.8 · Critical · EPSS 3.4% · Public exploit · Fix available

Published

2017-04-12T22:00:00.000Z

Updated

2024-08-06T07:51:28.624Z

Stack: php

Check your server →