CVE-2015-7564 TeamPass vulnerable to SQL Injection
Remote attackers can execute arbitrary SQL commands via vulnerable parameters in TeamPass, potentially compromising stored credentials and data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-7564?
CVE-2015-7564 is a critical SQL injection vulnerability in Teampass Teampass, published on 12 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) connections_logs, (b) errors_logs or (c) access_logs action to view.query.php.
Weakness: CWE-89
Which versions are affected by CVE-2015-7564?
2 open source packages ship an affected version, including nilsteampassnet/teampass. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
nilsteampassnet/teampass Packagist | All versions | 2.1.25 |
nilsteampassnet/teampass Packagist | All versions | 2.1.25 |
Products include Teampass Teampass.
How do I fix CVE-2015-7564?
Upgrade nilsteampassnet/teampass to 2.1.25 or later.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2015-7564 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2015-7564 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Teampass Teampass
Sources
Also known as GHSA-r64j-5w3w-fp49.