Approved changes feed: RSS · Atom

cpe:2.3:a:teamplus:team\+_pro:*:*:*:*:private_cloud:android:*:*

part: a version: * update: *

VendorTeamplus (016438af-d76d-57ca-a429-2446fb1e1ee3)
ProductTeam+ Pro (82be0659-374f-5ebd-a264-898335df9ec8)
Edition*
Language*
Software editionprivate_cloud
Target softwareandroid
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9923 vulnerable 2026-06-08 07:00:28.908715 TEAMPLUS TECHNOLOGY Team+ - Arbitrary File Move through Path Traversal
MEDIUM (4.9)
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them.
Published: 2024-10-14T03:17:07.360Z
Updated: 2024-10-15T18:16:10.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9922 vulnerable 2026-06-08 07:00:28.908241 TEAMPLUS TECHNOLOGY Team+ - Arbitrary File Read through Path Traversal
HIGH (7.5)
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
Published: 2024-10-14T02:55:01.325Z
Updated: 2024-10-15T18:20:33.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9921 vulnerable 2026-06-08 07:00:28.907519 TEAMPLUS TECHNOLOGY Team+ - SQL Injection
CRITICAL (9.8)
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify and delete database contents.
Published: 2024-10-14T02:48:52.207Z
Updated: 2024-10-15T18:21:58.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35221 vulnerable 2026-06-08 05:46:04.281206 TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-2
MEDIUM (5.4)
Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing partial post content and disrupt partial service.
Published: 2022-08-02T15:20:44.721Z
Updated: 2024-09-16T22:55:47.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35220 vulnerable 2026-06-08 05:46:04.279713 TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-1
HIGH (7.7)
Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much memory, leading to abnormal termination of this client’s Teamplus Pro application.
Published: 2022-08-02T15:20:32.031Z
Updated: 2024-09-17T03:33:42.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32958 vulnerable 2026-06-08 05:44:46.053566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.