CVE-2017-9436

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-9436
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9436.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-9436
Aliases
Published
2017-06-05T14:29:00.700Z
Modified
2026-07-08T05:51:51.187408632Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:teampass:teampass:2.1.20.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:teampass:teampass:2.1.22.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "2.1.20.0"
                },
                {
                    "last_affected": "2.1.20.0"
                },
                {
                    "introduced": "2.1.22.0"
                },
                {
                    "last_affected": "2.1.22.0"
                }
            ],
            "vendor_product": "teampass:teampass",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/nilsteampassnet/teampass

Affected ranges

Type
GIT
Repo
https://github.com/nilsteampassnet/teampass
Events
Introduced
82031ba660c0b96f9a89b490c5764e678827953b
Last affected
68ace1b112e7aa676f7aa837373d365ed1d94a5c
Database specific 
{
    "cpe": [
        "cpe:2.3:a:teampass:teampass:2.1.23.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.23.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.23.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.23.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.24.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.24.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.24.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.24.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.24.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.25.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.25.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.25.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.26.19:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.27.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.27.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.27.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:teampass:teampass:2.1.27.3:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "2.1.23.1"
        },
        {
            "last_affected": "2.1.23.1"
        },
        {
            "introduced": "2.1.23.2"
        },
        {
            "last_affected": "2.1.23.2"
        },
        {
            "introduced": "2.1.23.3"
        },
        {
            "last_affected": "2.1.23.3"
        },
        {
            "introduced": "2.1.23.4"
        },
        {
            "last_affected": "2.1.23.4"
        },
        {
            "introduced": "2.1.24.0"
        },
        {
            "last_affected": "2.1.24.0"
        },
        {
            "introduced": "2.1.24.1"
        },
        {
            "last_affected": "2.1.24.1"
        },
        {
            "introduced": "2.1.24.2"
        },
        {
            "last_affected": "2.1.24.2"
        },
        {
            "introduced": "2.1.24.3"
        },
        {
            "last_affected": "2.1.24.3"
        },
        {
            "introduced": "2.1.24.4"
        },
        {
            "last_affected": "2.1.24.4"
        },
        {
            "introduced": "2.1.25.0"
        },
        {
            "last_affected": "2.1.25.0"
        },
        {
            "introduced": "2.1.25.1"
        },
        {
            "last_affected": "2.1.25.1"
        },
        {
            "introduced": "2.1.25.2"
        },
        {
            "last_affected": "2.1.25.2"
        },
        {
            "introduced": "2.1.26"
        },
        {
            "last_affected": "2.1.26"
        },
        {
            "introduced": "2.1.26.0"
        },
        {
            "last_affected": "2.1.26.0"
        },
        {
            "introduced": "2.1.26.1"
        },
        {
            "last_affected": "2.1.26.1"
        },
        {
            "introduced": "2.1.26.2"
        },
        {
            "last_affected": "2.1.26.2"
        },
        {
            "introduced": "2.1.26.3"
        },
        {
            "last_affected": "2.1.26.3"
        },
        {
            "introduced": "2.1.26.4"
        },
        {
            "last_affected": "2.1.26.4"
        },
        {
            "introduced": "2.1.26.5"
        },
        {
            "last_affected": "2.1.26.5"
        },
        {
            "introduced": "2.1.26.6"
        },
        {
            "last_affected": "2.1.26.6"
        },
        {
            "introduced": "2.1.26.7"
        },
        {
            "last_affected": "2.1.26.7"
        },
        {
            "introduced": "2.1.26.8"
        },
        {
            "last_affected": "2.1.26.8"
        },
        {
            "introduced": "2.1.26.9"
        },
        {
            "last_affected": "2.1.26.9"
        },
        {
            "introduced": "2.1.26.10"
        },
        {
            "last_affected": "2.1.26.10"
        },
        {
            "introduced": "2.1.26.11"
        },
        {
            "last_affected": "2.1.26.11"
        },
        {
            "introduced": "2.1.26.12"
        },
        {
            "last_affected": "2.1.26.12"
        },
        {
            "introduced": "2.1.26.13"
        },
        {
            "last_affected": "2.1.26.13"
        },
        {
            "introduced": "2.1.26.14"
        },
        {
            "last_affected": "2.1.26.14"
        },
        {
            "introduced": "2.1.26.15"
        },
        {
            "last_affected": "2.1.26.15"
        },
        {
            "introduced": "2.1.26.16"
        },
        {
            "last_affected": "2.1.26.16"
        },
        {
            "introduced": "2.1.26.17"
        },
        {
            "last_affected": "2.1.26.17"
        },
        {
            "introduced": "2.1.26.18"
        },
        {
            "last_affected": "2.1.26.18"
        },
        {
            "introduced": "2.1.26.19"
        },
        {
            "last_affected": "2.1.26.19"
        },
        {
            "introduced": "2.1.27.0"
        },
        {
            "last_affected": "2.1.27.0"
        },
        {
            "introduced": "2.1.27.1"
        },
        {
            "last_affected": "2.1.27.1"
        },
        {
            "introduced": "2.1.27.2"
        },
        {
            "last_affected": "2.1.27.2"
        },
        {
            "introduced": "2.1.27.3"
        },
        {
            "last_affected": "2.1.27.3"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.1.23.1
2.1.23.2
2.1.23.4
2.1.24.0
2.1.24.1
2.1.24.2
2.1.24.3
2.1.24.4
2.1.25.0
2.1.25.1
2.1.25.2
2.1.26
2.1.26.0
2.1.26.1
2.1.26.10
2.1.26.11
2.1.26.13
2.1.26.14
2.1.26.15
2.1.26.16
2.1.26.17
2.1.26.18
2.1.26.19
2.1.26.2
2.1.26.3
2.1.26.4
2.1.26.5
2.1.26.6
2.1.26.7
2.1.26.8
2.1.26.9
2.1.27.0
2.1.27.1
2.1.27.2
2.1.27.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9436.json"