CVE-2017-15054

An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to tamper with parameters of a request to upload.files.php, in order to select the correct branch and be able to upload any arbitrary file. From there, it can simply access the file to execute code on the server.

• CWE-434

• http://blog.amossys.fr/teampass-multiple-cve-01.htmlExploit, Technical Description, Third Party Advisory
• https://github.com/nilsteampassnet/TeamPass/commit/9811c9d453da4bd1101ff7033250d1fbedf101fcPatch
• http://blog.amossys.fr/teampass-multiple-cve-01.htmlExploit, Technical Description, Third Party Advisory
• https://github.com/nilsteampassnet/TeamPass/commit/9811c9d453da4bd1101ff7033250d1fbedf101fcPatch

Published

Nov 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15047The clusterLoadConfig function in cluster.c in Redis 4.0.2 a…
• CVE-2017-15048Stack-based buffer overflow in the ZoomLauncher binary in th…8.8
• CVE-2017-15049The ZoomLauncher binary in the Zoom client for Linux before …8.8
• CVE-2017-15051Multiple stored cross-site scripting (XSS) vulnerabilities i…
• CVE-2017-15052TeamPass before 2.1.27.9 does not properly enforce manager a…
• CVE-2017-15053TeamPass before 2.1.27.9 does not properly enforce manager a…
• CVE-2017-15055TeamPass before 2.1.27.9 does not properly enforce item acce…
• CVE-2017-15056p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allow…
• CVE-2017-1506IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site s…
• CVE-2017-15063There are CSRF vulnerabilities in Subrion CMS 4.1.x through …
• CVE-2017-15064Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15065Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…