4 matches found
CVE-2014-8081
lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the filterresultresult parameter...
CVE-2014-8081
CVE-2014-8081 affects TestLink up to version 1.9.12 (and earlier) where lib/execute/execSetResults.php processes the filter_result_result parameter unsafely, allowing PHP object injection and arbitrary code execution. The vulnerability stems from unserialize on user input, enabling crafted serial...
CVE-2014-8081: Improper Control of Generation of Code
lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the filterresultresult parameter...
PT-2014-8405
Name of the Vulnerable Software and Affected Versions TestLink versions prior to 1.9.13 Description The issue allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the filter result result parameter in the lib/execute/execSetResults.php file...