428 matches found
CVE-2020-12273
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
CVE-2020-12274
In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...
CVE-2020-12273
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
Design/Logic Flaw
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
Session fixation
In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...
CVE-2020-12273
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
CVE-2020-12273
CVE-2020-12273 affects TestLink 1.9.20, where a crafted login.php viewer parameter exposes cleartext credentials. The issue originates from the login.php viewer parameter and results in credential disclosure (cleartext) as described in multiple catalogs (NVD, Red Hat, CNVD, OSV, CVE lists). Impac...
CVE-2020-12273
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
CVE-2020-12274
In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...
CVE-2020-12274
CVE-2020-12274 affects TestLink 1.9.20. The vulnerability is in lib/cfields/cfieldsExport.php where the goback_url parameter uses client input without proper constraining to lib/cfields/cfieldsView.php for the session site. This describes a security risk but the connected Red Hat/CVE sources do n...
CVE-2020-12274
In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...
PT-2020-13086
Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description A crafted viewer parameter in the login.php endpoint exposes cleartext credentials. Recommendations For TestLink version 1.9.20, avoid using the viewer parameter in the login.php endpoint until the issue is...
PT-2020-13087
Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description The issue arises from the goback url parameter in the lib/cfields/cfieldsExport.php file, which relies on client input and lacks proper constraints to lib/cfields/cfieldsView.php within the session's...
CVE-2020-12273: Missing Encryption of Sensitive Data
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...
CVE-2020-12274: Undefined Security Weakness
In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...
TestLink urgenc parameter SQL injection vulnerability
TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A SQL injection vulnerability exists in TestLink version 1.9.20. An attacker can exploit this vulnerability by executing arbitrary SQL commands in planUrgency.php with the...
TestLink node_id parameter SQL injection vulnerability
TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A SQL injection vulnerability exists in TestLink version 1.9.20. An attacker can exploit this vulnerability by executing arbitrary SQL commands in dragdroptreenodes.php with the...
TestLink File Upload Vulnerability
TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A file upload vulnerability exists in the keywordImport.php file in TestLink version 1.9.20. A remote attacker can exploit this vulnerability by uploading a file with an...