CVE-2015-7390

CVE-2015-7390 is supported by multiple connected sources detailing a SQL injection in TestLink prior to 1.9.14. The vulnerability allows remote attackers to inject arbitrary SQL via the apikey parameter to lnl.php, potentially compromising the database. Affected version range is before 1.9.14; th...

TestLink Security Advisory - SQL Injection Vulnerability - CVE-2015-7390

Information -------------------- Advisory by Netsparker. Name: SQL Injection Vulnerability in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type : SQL Injection Severity : Critical Status : Fixed...

TestLink 1.9.13 SQL Injection

Information -------------------- Advisory by Netsparker. Name: SQL Injection Vulnerability in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type : SQL Injection Severity : Critical Status : Fixed...