CVE-2020-8637

Mô tả

Tham khảo

• ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection · Exploit
• TestLinkOpenSourceTRMS/testlink-code commit d99bd82 · Patch

Lỗ hổng khác của testlink

• CVE-2024-46097CAO 8.1TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an inc…
• CVE-2024-42906TRUNG BÌNH 6.1TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a file, the XSS payload c…
• CVE-2023-50110CAO 7.5TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.
• CVE-2022-35196CAO 8.8TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.
• CVE-2022-35194TRUNG BÌNH 5.4TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php.