Lucene search

PRIOn knowledge basePRION:CVE-2012-0939

HistoryAug 14, 2014 - 2:55 p.m.

Sql injection

2014-08-1414:55:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.7%

JSON

Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execute arbitrary SQL commands via the req_spec_id parameter to (1) reqSpecAnalyse.php, (2) reqSpecPrint.php, or (3) reqSpecView.php in requirements/. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
testlinkeq1.8.598
testlinkeq1.9.3

CPE	Name	Operator	Version
	testlink	eq	1.8.598
	testlink	eq	1.9.3

References

archives.neohapsis.com/archives/bugtraq/2012-02/0104.html

osvdb.org/79447

osvdb.org/79448

osvdb.org/79449

secunia.com/advisories/48054

www.securityfocus.com/bid/52086

exchange.xforce.ibmcloud.com/vulnerabilities/73389

8.7 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.7%

JSON

Related for PRION:CVE-2012-0939