CVE-2015-7564

9.8 criticalEPSS 3.4%

Critical (9.8) in teampass teampass. EPSS 3.4% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) connections_logs, (b) errors_logs or (c) access_logs action to view.query.php.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

teampass:teampass

References

https://github.com/nilsteampassnet/TeamPass/pull/1140
https://www.exploit-db.com/exploits/39559/
https://github.com/nilsteampassnet/TeamPass/pull/1140
https://www.exploit-db.com/exploits/39559/

Check your stack JSON