EUVD-2020-29485

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...

CVE-2020-8637

SQL injection vulnerability in TestLink 1.9.20 allows execution of arbitrary SQL commands through the node_id parameter in dragdroptreenodes.php. Affected software: TestLink 1.9.20. Root cause: unsafely handled node_id parameter enabling SQL injection. Impact (per sources): high risk with potenti...

CVE-2020-8639: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system...

CVE-2020-8637: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...

CVE-2020-8638: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in planUrgency.php via the urgency parameter...

TestLink SQL Injection Vulnerability (CNVD-2020-16091)

TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A SQL injection vulnerability exists in TestLink 1.9.19 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in...

CVE-2019-20107

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...

CVE-2019-20107

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...

Sql injection

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...

CVE-2019-20107

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...

CVE-2019-20107

CVE-2019-20107 covers multiple SQL injection vulnerabilities in TestLink up to version 1.9.19. The flaws allow remote authenticated users to execute arbitrary SQL via input parameters in several PHP scripts (keywordsView.php, reqSpecCompareRevisions.php, reqCompareVersions.php, planUpdateTC.php, ...

CVE-2019-20107: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...

TestLink < 1.9.20 Multiple SQLi Vulnerabilities

TestLink is prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

TestLink SQL Injection Vulnerability

TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A SQL injection vulnerability exists in TestLink version 1.9.19. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

CVE-2020-8841

An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...

CVE-2020-8841

An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...

Sql injection

An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...

CVE-2020-8841

An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...

CVE-2020-8841

An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...

CVE-2020-8841

CVE-2020-8841 affects TestLink 1.9.19. The issue is an authenticated SQL Injection in the relation_type parameter of the lib/requirements/reqSearch.php endpoint. This vulnerability arises from improper handling/validation of external input, enabling an attacker with authenticated access to inject...