3 matches found
CVE-2020-8841
An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...
CVE-2020-8841: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...
PT-2020-20317
Name of the Vulnerable Software and Affected Versions TestLink version 1.9.19 Description An issue was discovered that allows for authenticated SQL Injection through the relation type parameter of the "lib/requirements/reqSearch.php" endpoint. Recommendations For TestLink version 1.9.19, avoid...