Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority LOW 23

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access the…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00602 Published 2024-10-14 No fix listed CWE-23
Priority MEDIUM 40

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00666 Published 2024-10-14 No fix listed CWE-23
TI-2024-09205 CVE-2024-9921 · GHSA-352h-846h-f54v

TEAMPLUS TECHNOLOGY Team+ - SQL Injection

Priority MEDIUM 50

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify and delete database contents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00725 Published 2024-10-14 No fix listed CWE-89