CVE-2014-5308

Description

References

• osvdb.org/show/osvdb/112524
• packetstormsecurity.com/files/128521/TestLink-1.9.11-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2014/Oct/11 · Exploit
• seclists.org/fulldisclosure/2014/Oct/13 · Exploit
• exploit-db.com/exploits/34863 · Exploit
• securityfocus.com/bid/70207
• gitorious.org/testlink-ga/testlink-code/commit/7a099737b4c739bf083df016c0a99f66dd8ac0b3 · Exploit
• portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5308 · Exploit

Más vulnerabilidades de testlink

• CVE-2024-46097ALTO 8.1TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an inc…
• CVE-2024-42906MEDIO 6.1TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a file, the XSS payload c…
• CVE-2023-50110ALTO 7.5TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.
• CVE-2022-35196ALTO 8.8TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.
• CVE-2022-35194MEDIO 5.4TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php.