Browse CVEs

HIGH 8.1 CVE-2024-46097 TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental … Testlink No fix yet Fix from $1,9502024-09-27 HIGH 8.8 CVE-2022-35196 TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php. Testlink No fix yet Fix from $1,9502022-09-20 MEDIUM 5.4 CVE-2022-35194 TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php. Testlink No fix yet Fix from $1,6002022-09-16 HIGH 7.2 CVE-2022-35193 TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php. Testlink No fix yet Fix from $1,9502022-09-16 HIGH 7.2 CVE-2022-35195 TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php Testlink No fix yet Fix from $1,9502022-09-16 MEDIUM 6.1 CVE-2019-19491 TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.ph… Testlink No fix yet Fix from $1,6002019-12-02 MEDIUM 6.1 CVE-2019-14471 TestLink 1.9.19 has XSS via the error.php message parameter. Testlink No fix yet Fix from $1,6002019-08-01 HIGH 9.0 CVE-2014-5308 Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL commands via the (1) name paramet… Testlink No fix yet Fix from $1,9502014-10-08 MEDIUM 6.5 CVE-2012-0938EPSS 6% Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with certain permissions to execute ar… Testlink Mitigation only Fix from $1,6002014-08-14 MEDIUM 6.5 CVE-2012-0939 Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execut… Testlink Mitigation only Fix from $1,6002014-08-14