CVE-2017-15054

CVE-2017-15054 is an arbitrary file upload vulnerability affecting TeamPass versions prior to 2.1.27.9. This flaw allows authenticated attackers to upload arbitrary files, leading to Remote Command Execution by manipulating parameters in the upload.files.php request. With a CVSS score of 7.5 (HIGH), exploitation requires authenticated access and moderate attack complexity, but can result in high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.