CVE-2015-7391

MEDIO 6.1CVE-2015-7391 · Published 26/09/2017 · updated 17/06/2026

En resumen

CVE-2015-7391 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a testlink (testlink).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.76%, mayor que el 55.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
testlink testlink	`≤ 1.9.13`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.9.14 allow remote attackers to inject arbitrary web script or HTML via the (1) selected_end_date or (2) selected_start_date parameter to lib/results/tcCreatedPerUserOnTestProject.php; the (3) containerType parameter to lib/testcases/containerEdit.php; the (4) filter_tc_id or (5) filter_testcase_name parameter to lib/testcases/listTestCases.php; the (6) useRecursion parameter to lib/testcases/tcImport.php; the (7) targetTestCase or (8) created_by parameter to lib/testcases/tcSearch.php; or the (9) HTTP Referer header to third_party/user_contribution/fakeRemoteExecServer/client4fakeXMLRPCTestRunner.php.

References

securityfocus.com/archive/1/536622/100/0/threaded

Más vulnerabilidades de testlink

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

testlink

≤ 1.9.13

No fix yet

Description

Más vulnerabilidades de testlink

Ver todo →