338 matches found
Sql injection
A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...
Unrestricted file upload
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system...
EUVD-2020-29487
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system...
CVE-2020-8639
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system...
CVE-2020-8639
CVE-2020-8639 affects TestLink 1.9.20 via an unrestricted file upload in the keywordsImport.php endpoint. According to the sources, an authenticated attacker can upload a file with an executable extension to a publicly accessible directory, enabling arbitrary code execution (e.g., PHP) on the ser...
CVE-2020-8638
CVE-2020-8638 applies to TestLink 1.9.20 and is triggered via the urgency parameter in planUrgency.php, enabling SQL injection. Concrete details across connected sources confirm the vulnerable software and the affected parameter, with CVSS data indicating high severity remotely exploitable withou...
CVE-2020-8638
A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in planUrgency.php via the urgency parameter...
CVE-2020-8637
A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...
EUVD-2020-29485
A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...
CVE-2020-8637
SQL injection vulnerability in TestLink 1.9.20 allows execution of arbitrary SQL commands through the node_id parameter in dragdroptreenodes.php. Affected software: TestLink 1.9.20. Root cause: unsafely handled node_id parameter enabling SQL injection. Impact (per sources): high risk with potenti...
TestLink SQL Injection Vulnerability (CNVD-2020-16091)
TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A SQL injection vulnerability exists in TestLink 1.9.19 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in...
CVE-2019-20107
Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...
CVE-2019-20107
Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...
Sql injection
Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...
CVE-2019-20107
CVE-2019-20107 covers multiple SQL injection vulnerabilities in TestLink up to version 1.9.19. The flaws allow remote authenticated users to execute arbitrary SQL via input parameters in several PHP scripts (keywordsView.php, reqSpecCompareRevisions.php, reqCompareVersions.php, planUpdateTC.php, ...
CVE-2019-20107
Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...
TestLink < 1.9.20 Multiple SQLi Vulnerabilities
TestLink is prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
TestLink SQL Injection Vulnerability
TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A SQL injection vulnerability exists in TestLink version 1.9.19. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...