Lucene search
+L

CVE-2015-7391

🗓️ 26 Sep 2017 15:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 70 Views🌐 WEB

CVE-2015-7391 XSS vulnerabilities in TestLink before 1.9.1

Related
Detection
Refs
Paths
NVD
Node
testlinktestlinkRange≤1.9.13
ParameterPositionPathDescriptionCWE
selected_end_daterequest body/testlink-code-1.9.13/lib/results/tcCreatedPerUserOnTestProject.phpXSS vulnerability in TestLink 1.9.13 via POST parameter selected_end_date on tcCreatedPerUserOnTestProject.phpCWE-79
selected_start_daterequest body/testlink-code-1.9.13/lib/results/tcCreatedPerUserOnTestProject.phpXSS vulnerability in TestLink 1.9.13 via POST parameter selected_start_date on tcCreatedPerUserOnTestProject.phpCWE-79
containerTyperequest body/testlink-code-1.9.13/lib/testcases/containerEdit.phpXSS vulnerability in TestLink 1.9.13 via POST parameter containerType on containerEdit.phpCWE-79
filter_tc_idrequest body/testlink-code-1.9.13/lib/testcases/listTestCases.php?feature=edit_tcXSS vulnerability in TestLink 1.9.13 via POST parameter filter_tc_id on listTestCases.php with feature=edit_tcCWE-79
filter_testcase_namerequest body/testlink-code-1.9.13/lib/testcases/listTestCases.php?feature=edit_tcXSS vulnerability in TestLink 1.9.13 via POST parameter filter_testcase_name on listTestCases.php with feature=edit_tcCWE-79
useRecursionquery param/testlink-code-1.9.13/lib/testcases/tcImport.php?containerID=2&bIntoProject=1&useRecursion=XSS vulnerability in TestLink 1.9.13 via GET parameter useRecursion on tcImport.phpCWE-79
targetTestCaserequest body/testlink-code-1.9.13/lib/testcases/tcSearch.phpXSS vulnerability in TestLink 1.9.13 via POST parameter targetTestCase on tcSearch.phpCWE-79
created_byrequest body/testlink-code-1.9.13/lib/testcases/tcSearch.phpXSS vulnerability in TestLink 1.9.13 via POST parameter created_by on tcSearch.phpCWE-79
Refererheader/testlink-code-1.9.13/third_party/user_contribution/fakeRemoteExecServer/client4fakeXMLRPCTestRunner.phpXSS vulnerability in TestLink 1.9.13 via HTTP Referer header on client4fakeXMLRPCTestRunner.phpCWE-79
apikeyquery param/lnl.phpSQL Injection vulnerability in TestLink via GET parameter apikey on lnl.phpCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:32Current
6Medium risk
Vulners AI Score6
CVSS 24.3
CVSS 36.1
EPSS0.00757
70