CVE-2009-4238

Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the Test Case ID field to lib/general/navBar.php or 2 the logLevel parameter to lib/events/eventviewer.php...

CVE-2009-4237

Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via 2 the key parameter to...

CVE-2009-4237

Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via 2 the key parameter to...

CVE-2009-4238

TestLink prior to 1.8.5 contains multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands via inputs such as the Test Case ID field (lib/general/navBar.php) or the logLevel parameter (lib/events/eventviewer.php). The issue stems from insuffici...

CVE-2009-4237

TestLink (before version 1.8.5) is affected by multiple XSS and SQL injection vulnerabilities. The XSS flaws affect inputs across several scripts (e.g., login.php req parameter; lib/general/staticPage.php key; lib/attachments/attachmentupload.php tableName; lib/events/eventviewer.php startDate, e...

CVE-2009-4238

Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the Test Case ID field to lib/general/navBar.php or 2 the logLevel parameter to lib/events/eventviewer.php...

TestLink < 1.8.5 Multiple Vulnerabilities

Binary data 5258.prm...

Core Security Technologies Advisory 2009.1013

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System 1. Advisory Information Title: Multiple XSS and Injection Vulnerabilities ...

CVE-2009-4237: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via 2 the key parameter to...

PT-2009-6400 · Testlink Team · Testlink

Name of the Vulnerable Software and Affected Versions: TestLink versions prior to 1.8.5 Description: The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the Test Case ID field to "lib/general/navBar.php" or the logLevel parameter to...

CVE-2009-4238: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the Test Case ID field to lib/general/navBar.php or 2 the logLevel parameter to lib/events/eventviewer.php...

TestLink Detection (HTTP)

HTTP based detection of TestLink. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100389";...

TestLink < 1.8.5 Multiple Vulnerabilities

TestLink is prone to multiple SQL injection SQLi and cross-site scripting XSS vulnerabilities because it fails to sufficiently sanitize user-supplied data. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

TestLink login.php req Parameter XSS

The remote web server is hosting TestLink, a test-management application written in PHP. The installed version of TestLink is affected by a cross-site scripting vulnerability in the 'req' parameter of the 'login.php' script. An attacker could exploit this flaw to execute arbitrary script code in ...

TestLink Test Management and Execution System - Multiple Cross-Site Scripting / Injection Vulnerabilities

Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System 1. Advisory Information Title: Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution Syst...

Multiple XSS Injection Vulnerabilities in TestLink Test Management

Exploit for unknown platform in category web applications ======================================================================================= Multiple XSS Injection Vulnerabilities in TestLink Test Management and Execution System...

Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System

Advisory ID Internal CORE-2009-1013 1. Advisory Information Advisory Id: CORE-2009-1013 Advisory URL:http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities Date published: 2009-12-09 Date of last update: 2009-12-09 Vendors contacted: TestLink Community Release mode:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 Testproject Names and 2 Testplan Names in planEdit.php, and possibly 3 Testcaseprefixes in projectview.tpl...

CVE-2008-5807

Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 Testproject Names and 2 Testplan Names in planEdit.php, and possibly 3 Testcaseprefixes in projectview.tpl...

CVE-2008-5807

Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 Testproject Names and 2 Testplan Names in planEdit.php, and possibly 3 Testcaseprefixes in projectview.tpl...