CVE-2014-8081

概要

参考情報

• karmainsecurity.com/KIS-2014-11 · Exploit
• mantis.testlink.org/view.php · Vendor Advisory
• seclists.org/fulldisclosure/2014/Oct/105 · Exploit
• securityfocus.com/archive/1/533798/100/0/threaded
• securityfocus.com/bid/70711
• exchange.xforce.ibmcloud.com/vulnerabilities/97727
• gitorious.org/testlink-ga/testlink-code/commit/a519da3a45d80077e4eab957eb793b03652f57dc

testlink のその他の脆弱性

• CVE-2024-46097高 8.1TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an inc…
• CVE-2024-42906中 6.1TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a file, the XSS payload c…
• CVE-2023-50110高 7.5TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.
• CVE-2022-35196高 8.8TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.
• CVE-2022-35194中 5.4TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php.