CVEs-PoC/2014/CVE-2014-3772.md

CVE-2014-3772

Description

TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key, as demonstrated by a request to sources/upload/upload.files.php.

POC

Reference

• 7715512f2b

Github

No PoCs found on GitHub currently.