376 matches found
TestLink login.php req Parameter XSS
The remote web server is hosting TestLink, a test-management application written in PHP. The installed version of TestLink is affected by a cross-site scripting vulnerability in the 'req' parameter of the 'login.php' script. An attacker could exploit this flaw to execute arbitrary script code in ...
CVE-2009-4238: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the Test Case ID field to lib/general/navBar.php or 2 the logLevel parameter to lib/events/eventviewer.php...
Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System
Advisory ID Internal CORE-2009-1013 1. Advisory Information Advisory Id: CORE-2009-1013 Advisory URL:http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities Date published: 2009-12-09 Date of last update: 2009-12-09 Vendors contacted: TestLink Community Release mode:...
TestLink Test Management and Execution System - Multiple Cross-Site Scripting / Injection Vulnerabilities
Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System 1. Advisory Information Title: Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution Syst...
Multiple XSS Injection Vulnerabilities in TestLink Test Management
Exploit for unknown platform in category web applications ======================================================================================= Multiple XSS Injection Vulnerabilities in TestLink Test Management and Execution System...
CVE-2008-5807
Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 Testproject Names and 2 Testplan Names in planEdit.php, and possibly 3 Testcaseprefixes in projectview.tpl...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 Testproject Names and 2 Testplan Names in planEdit.php, and possibly 3 Testcaseprefixes in projectview.tpl...
CVE-2008-5807
CVE-2008-5807 relates to multiple XSS vulnerabilities in TestLink prior to 1.8 RC1. The issues allow remote attackers to inject arbitrary web script or HTML via (1) Testproject Names and (2) Testplan Names in planEdit.php, and possibly (3) Testcaseprefixes in projectview.tpl. Affected software is...
CVE-2008-5807
Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 Testproject Names and 2 Testplan Names in planEdit.php, and possibly 3 Testcaseprefixes in projectview.tpl...
CVE-2008-5807: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 Testproject Names and 2 Testplan Names in planEdit.php, and possibly 3 Testcaseprefixes in projectview.tpl...
Authorization
TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors...
CVE-2007-6006
TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors...
CVE-2007-6006
TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors...
CVE-2007-6006
The CVE-2007-6006 entry concerns TestLink before version 1.7.1 that does not enforce an unspecified authorization mechanism. The impact and attack vectors are not explicitly defined in the provided documents; exploitation details are not provided. No concrete remediation or vendor/version specifi...