漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
Multiple stored cross-site scripting (XSS) vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the (1) URL value of an item or (2) user log history. To exploit the vulnerability, the attacker must be first authenticated to the application. For the first one, the attacker has to simply inject XSS code within the URL field of a shared item. For the second one however, the attacker must prepare a payload within its profile, and then ask an administrator to modify its profile. From there, whenever the administrator accesses the log, it can be XSS'ed.
漏洞信息
N/A
漏洞
N/A
漏洞
TeamPass 跨站脚本漏洞
漏洞信息
TeamPass是一款专用于Apache、MySQL和PHP中的密码管理器。 TeamPass 2.1.27.9之前的版本中存在多个跨站脚本漏洞。远程攻击者可借助项目的URL值或用户日志历史记录利用该漏洞注入任意的Web脚本或HTML。
漏洞信息
N/A
漏洞
N/A