CVE-2020-8637

2020-04-0319:15:13

Google

osv.dev

8.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.9%

JSON

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id parameter.

CPENameOperatorVersion
testlink-codeeq1.9.11
testlink-codeeq1.9.14
testlink-codeeq1.9.15
testlink-codeeq1.9.18
testlink-codeeq1.9.10
testlink-codeeq1.9.13
testlink-codeeqDevBeforeSmartyWIthComposer
testlink-codeeq1.9.5
testlink-codeeq1.9.20
testlink-codeeq1.9.6

Name	Operator	Version
testlink-code	eq	1.9.11
testlink-code	eq	1.9.14
testlink-code	eq	1.9.15
testlink-code	eq	1.9.18
testlink-code	eq	1.9.10
testlink-code	eq	1.9.13
testlink-code	eq	DevBeforeSmartyWIthComposer
testlink-code	eq	1.9.5
testlink-code	eq	1.9.20
testlink-code	eq	1.9.6