TestLink versions 1.16 through 1.19 suffer from an arbitrary file download vulnerability.
0d4f2423494cf6a179f394e226b4ffca187f2beaa2d20adb0504a4b550937e84TestLink version 1.9.20 suffers from a remote shell upload vulnerability.
c77386d58d62722f1ea02fb39203f5ae3734576744e803a7331e2cf8529a9d98TestLink version 1.9.19 suffers from a persistent cross site scripting vulnerability.
86e26947c940c9d530ddb67e77336e366e006fb43b1697fad0ed86a2cbec93a6TestLink versions 1.9.19 and below suffers from a server side request forgery vulnerability.
4135c5cf334226208cc17b50f9d53094a3a71aef0f049cd1dbf262a2fcbfaf8aTestLink Open Source Test Management versions prior to 1.9.16 remote proof of concept code execution exploit.
7f1cec95295792a263ea245ef75d239589db9afc06b5a1a8e021fc6d031a4154TestLink Open Source Test Management versions prior to 1.9.16 suffer from a remote code execution vulnerability.
8ad9056ec040b407f63167dc210d68bdd226dc758f6f0755a6f5a3ad4e538f97TestLink Open Source Test Management versions prior to 1.9.17 suffer from an insecure direct object reference.
0910df37fb4c03268b6c09f2acdee5ba8b437d90519a496c092a0421442672d9TestLink version 1.9.14 suffers from a remote SQL injection vulnerability.
91d1c80956419cb3834dcfcd444983fe9cb7d79deae450a0f99e91da4a1bf961TestLink version 1.9.14 suffers from a cross site request forgery vulnerability.
39f7ec2dfdf407f0782e906eebab9e38be681ca13f49a2d95361090f5468631aTestLink version 1.9.14 suffers from a persistent cross site scripting vulnerability.
b46be8c0b8fb93b229267719e4d51695ead81f8d924cf7b2a0540380b2ef4098TestLink version 1.9.13 suffers from multiple cross site scripting vulnerabilities.
5230eccf702e10b722d8c391655f290d789494d743b802c5506670a312281917TestLink version 1.9.13 suffers from a remote SQL injection vulnerability.
e9e6f1842a313a62999a5d4e95558ee5a223b9fd6e37b8be04d0e64fc4439978TestLink versions 1.9.12 and below suffer from a path disclosure weakness.
d4e121ab0a2d7487bb19bb362e04c56ee75b63e8fc27574280cfee78584f1aadTestLink versions 1.9.12 and below suffer from a PHP object injection vulnerability in execSetResults.php.
84140ec47ef7b41446e409364cc8ec283f65b120fa742ffdf380813e2bf74c75TestLink version 1.9.11 suffers from multiple remote SQL injection vulnerabilities.
89a8209be3fba1b541de072c93114fc6da4c5937177e0ac438ee7af7946ca9c8TestLink version 1.9.3 suffers from a cross site request forgery vulnerability.
736b804ed14899a61e45af9653a9658234392141a3b1244d4491cc912560e8b1Secunia Security Advisory - Brendan Coles has discovered two security issues and a vulnerability in TestLink, which can be exploited by malicious people to conduct cross-site forgery attacks and disclose certain sensitive and system information.
b75356024a543a0d9fde7722cd0bfef56d5c9bb5cdff27c1f45155eefb22e5adThis Metasploit module exploits a vulnerability in TestLink versions 1.9.3 and prior. This application has an upload feature that allows any authenticated user to upload arbitrary files to the '/upload_area/nodes_hierarchy/' directory with a randomized file name. The file name can be retrieved from the database using SQL injection.
d7801d84f2c0b381a4eab2c495d1007bc1e69f64d876b88ff24732a4755a2f71Secunia Security Advisory - Multiple vulnerabilities have been discovered in TestLink, which can be exploited by malicious users and malicious people to conduct SQL injection attacks.
4c2bc425760d13091f04a350ec93203c0697688a75ffcfbadd609c9d85c3e85bTestLink version 1.9.3 suffers from a remote SQL injection vulnerability.
5b79cc3873d33e07546bdbc0e0931cbc22ad17861768b7bbf8205110175bf6f2Testlink TestManagement and Execution System suffers from directory traversal vulnerabilities.
83f339bed5abb1597662d74924888afa7fdc10c709333f7bf52d46be82a6cbe1Testlink TestManagement and Execution System suffers from cross site scripting vulnerabilities.
8a208e2fc273c56399bdd1d85eaf21d90d1e06ad4d3f4357aba6e056b9c2bfd1Secunia Security Advisory - Prashant Khandelwal has discovered some vulnerabilities in Testlink, which can be exploited by malicious users to disclose sensitive information and by malicious people to conduct cross-site scripting attacks.
6a9b3c42a1552e232573f1c290c6f715693f88678423439dabb8522d9065e115Secunia Security Advisory - Some vulnerabilities have been discovered in TestLink, which can be exploited by malicious users to conduct SQL injection attacks and by malicious people to conduct cross-site scripting attacks.
4eecb8a0b1777103968dcfac82e73b6f45f857bff5d86e4bdc76c0fd0703dd57Core Security Technologies Advisory - The TestLink Test Management and Execution System suffers from cross site scripting and remote SQL injection vulnerabilities. Versions below 1.8.5 are affected.
2bbdda7eafe32f627a758e47e2c6db60062bf70f69910951129140b25d14cab6Secunia Security Advisory - Some vulnerabilities have been reported in TestLink, which can be exploited by malicious users to conduct script insertion attacks.
bd9bf50b7ed5b6031d81fd5b2acc865f0e5d30d0a412ffc83bc857423bc51a84
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Subscribe to an RSS Feed