EUVD-2022-38086

Malicious code in bioql PyPI...

EUVD-2022-38087

Malicious code in bioql PyPI...

CVE-2024-46097

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplanid parameter to another ID. The application does not carry out a...

CVE-2024-42906

TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...

CVE-2022-35193

TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php...

CVE-2020-8841

An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...

CVE-2019-14471

TestLink 1.9.19 has XSS via the error.php message parameter...

CVE-2019-19491

TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request...

CVE-2019-10378

Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2024-46097

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplanid parameter to another ID. The application does not carry out a...

CVE-2024-46097

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplanid parameter to another ID. The application does not carry out a...

CVE-2024-46097

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplanid parameter to another ID. The application does not carry out a...

TestLink 安全漏洞

TestLink is a suite of open source software from the TestLink team for managing the software testing process and providing statistical analysis. A security vulnerability exists in TestLink version 1.9.20 that stems from the application not checking user permissions, resulting in an access control...

CVE-2024-46097

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplanid parameter to another ID. The application does not carry out a...

CVE-2024-46097

Summary: CVE-2024-46097 affects TestLink 1.9.20 with an Incorrect Access Control in the TestPlan editing section. The flaw allows changing the tplan_id via edit operations due to missing permission checks, enabling recovery and modification of TestPlan IDs (including administrative ones) with min...

PT-2024-31908 · Testlink · Testlink

Name of the Vulnerable Software and Affected Versions: TestLink version 1.9.20 Description: The issue is related to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function, it is...

CVE-2024-42906

TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...

CVE-2024-42906

TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...

PT-2024-30200 · Testlink · Testlink

Name of the Vulnerable Software and Affected Versions: TestLink versions prior to 1.9.20 Description: The issue allows for Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name. Recommendations: For versions prior to 1.9.2...

CVE-2024-42906

TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...