Testlink Security Vulnerabilities and Issues — Testlink CVE List

Lucene search

TeamstTestlink

4 matches found

CVE•added 2009/12/10 11:30 p.m.•53 views

CVE-2009-4238

Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the Test Case ID field to lib/general/navBar.php or (2) the logLevel parameter to lib/events/eventviewer.php.

6.5CVSS7.9AI score0.00967EPSS

CVE•added 2009/12/10 11:30 p.m.•40 views

CVE-2009-4237

Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via (2) the key parameter to lib/general/sta...

3.5CVSS5.3AI score0.01139EPSS

CVE•added 2012/09/15 5:55 p.m.•35 views

CVE-2012-2275

Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to lib/u...

6.8CVSS7.2AI score0.00386EPSS

CVE•added 2008/12/31 11:30 a.m.•27 views

CVE-2008-5807

Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) Testproject Names and (2) Testplan Names in planEdit.php, and possibly (3) Testcaseprefixes in projectview.tpl.

4.3CVSS5.9AI score0.00285EPSS