PT-2017-7202

Name of the Vulnerable Software and Affected Versions TestLink versions prior to 1.9.14 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the apikey parameter to the "lnl.php" endpoint. Recommendations For versions prior to 1.9.14, update to...

PT-2017-7203

Name of the Vulnerable Software and Affected Versions TestLink versions prior to 1.9.14 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including selected end date and selected start date to...

TestLink 1.9.14 SQL Injection

Advisory ID: HTB23288 Product: TestLink Vendor: TestLink Development Team Vulnerable Versions: 1.9.14 and probably prior Tested Version: 1.9.14 Advisory Publication: January 7, 2016 without technical details Vendor Notification: January 7, 2016 Vendor Patch: January 9, 2016 Public Disclosure:...

TestLink SQL Injection Vulnerability (CNVD-2016-01142)

Testlink is a PHP-based open source test management tools . A SQL injection vulnerability exists in TestLink. The vulnerability is caused by the "apikey" HTTP GET parameter failing to filter via the "lnl.php" PHP script. An unauthenticated remote attacker can inject and execute arbitrary SQL...

SQL Injection in TestLink

High-Tech Bridge Security Research Lab discovered high-risk SQL injection vulnerability in TestLink Open Source Test Management. The vulnerability can be exploited to alter the present SQL query and gain access to potentially sensitive information or even to completely compromise the vulnerable w...

TestLink跨站请求伪造漏洞

No description provided by source...

TestLink HTML注入漏洞

No description provided by source...

TestLink HTML Injection Vulnerability

Testlink is TestLink team developed a PHP-based open source test management tool . The tool provides test requirements management , test case management and test data statistics and other functions . TestLink 1.9.14 version of the existence of HTML injection vulnerability. A remote attacker can...

TestLink Cross-Site Request Forgery Vulnerability

Testlink is TestLink team developed a PHP-based open source test management tool . The tool provides test requirements management , test case management and test data statistics and other functions . TestLink version 1.9.14 cross-site request forgery vulnerability exists. Remote attackers can...

TestLink 1.9.14 Cross Site Scripting

Information ================================= Name: Persistent XSS Vulnerability in TestLink 1.9.14 Affected Software: TestLink Affected Versions: 1.9.14 and possibly below Vendor Homepage: http://testlink.org/ Severity: High Status: Fixed Vulnerability Type: =================================...

TestLink 1.9.14 Multiple XSS Vulnerabilities

Exploit for hardware platform in category web applications Information ================================= Name: CSRF Vulnerability in TestLink 1.9.14 Affected Software: TestLink Affected Versions: 1.9.14 and possibly below Vendor Homepage: http://testlink.org/ Severity: High Status: Fixed...

TestLink 1.9.14 - Cross-Site Request Forgery

TestLink 1.9.14 - Cross-Site Request Forgery Information ================================= Name: CSRF Vulnerability in TestLink 1.9.14 Affected Software: TestLink Affected Versions: 1.9.14 and possibly below Vendor Homepage: http://testlink.org/ Severity: High Status: Fixed Vulnerability Type:...

TestLink 1.9.14 Cross Site Request Forgery

Information ================================= Name: CSRF Vulnerability in TestLink 1.9.14 Affected Software: TestLink Affected Versions: 1.9.14 and possibly below Vendor Homepage: http://testlink.org/ Severity: High Status: Fixed Vulnerability Type: ================================= Cross Site...

TestLink 1.9.14 - Cross-Site Request Forgery

Information ================================= Name: CSRF Vulnerability in TestLink 1.9.14 Affected Software: TestLink Affected Versions: 1.9.14 and possibly below Vendor Homepage: http://testlink.org/ Severity: High Status: Fixed Vulnerability Type: ================================= Cross Site...

TestLink Security Advisory - Multiple XSS Vulnerabilities - CVE-2015-7391

Information -------------------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type : Cross-site Scripting Severity : Important Status :...

TestLink Security Advisory - SQL Injection Vulnerability - CVE-2015-7390

Information -------------------- Advisory by Netsparker. Name: SQL Injection Vulnerability in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type : SQL Injection Severity : Critical Status : Fixed...

TestLink 1.9.13 Cross Site Scripting

Information -------------------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type : Cross-site Scripting Severity : Important Status :...

TestLink 1.9.13 SQL Injection

Information -------------------- Advisory by Netsparker. Name: SQL Injection Vulnerability in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type : SQL Injection Severity : Critical Status : Fixed...

TestLink 1.9.13 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Information -------------------- Advisory by Netsparker. Name: SQL Injection Vulnerability in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type ...

[KIS-2014-12] TestLink <= 1.9.12 (database.class.php) Path Disclosure Weakness

---------------------------------------------------------------- TestLink = 1.9.12 database.class.php Path Disclosure Weakness ---------------------------------------------------------------- - Software Link: http://testlink.org/ - Affected Versions: Version 1.9.12 and prior versions. - Weakness...