WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product testlink✕
Overview 23 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
23matches 2in Waratek scope8.7% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 8.7% Outside Waratek scope 0 0.0% Not applicable 21 91.3% Withdrawn CVE 0 0.0%
Critical 4 17.4% High 9 39.1% Medium 10 43.5% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 23 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 23 100.0%
split by peak 7 / year
Not applicable: 21No exploit published: 2 Medium: 10High: 9Critical: 4 not blocked: 23 No public exploit: 23
20071 Not applicable1 High1 not blocked1 No public exploit1 20081 Not applicable1 Medium1 not blocked1 No public exploit1 20090 20100 20110 20120 20130 20143 Not applicable3 High1 Medium2 not blocked3 No public exploit3 20150 20160 20172 Not applicable2 Critical1 Medium1 not blocked2 No public exploit2 20182 No exploit published1 Not applicable1 High1 Medium1 not blocked2 No public exploit2 20193 No exploit published1 Not applicable2 Medium3 not blocked3 No public exploit3 20207 Not applicable7 Critical3 High3 Medium1 not blocked7 No public exploit7 20210 20223 Not applicable3 High2 Medium1 not blocked3 No public exploit3 20231 Not applicable1 High1 not blocked1 No public exploit1
200720092011201320152017201920212023
23 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-50110 High 2023-12-30 Not applicable No public exploit TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.
CVE-2022-35195 High 2022-09-16 Not applicable No public exploit TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php
CVE-2022-35194 Medium 2022-09-16 Not applicable No public exploit TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php.
CVE-2022-35193 High 2022-09-16 Not applicable No public exploit TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.
CVE-2020-12274 Critical 2020-04-27 Not applicable No public exploit In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session.
CVE-2020-12273 High 2020-04-27 Not applicable No public exploit In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.
CVE-2020-8638 Critical 2020-04-03 Not applicable No public exploit A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in planUrgency.php via the urgency parameter.
CVE-2020-8637 Critical 2020-04-03 Not applicable No public exploit A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id parameter.
CVE-2019-20107 High 2020-03-05 Not applicable No public exploit Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to keywordsView.php; the (2) req_spec_id parameter to reqSpecCompareRevisions.php; the (3) requirement_id parameter to reqCompareVersions.php; the (4) build_id parameter to planUpdateTC.php; the (5) tplan_id parameter to newest_tcversions.php; the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) testcase_id parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration.
CVE-2020-8841 High 2020-02-10 Not applicable No public exploit An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection.
CVE-2019-20381 Medium 2020-01-20 Not applicable No public exploit TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491.
CVE-2019-19491 Medium 2019-12-02 Not applicable No public exploit TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request.
CVE-2019-10378 Medium 2019-08-07 No exploit published No public exploit Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2019-14471 Medium 2019-08-01 Not applicable No public exploit TestLink 1.9.19 has XSS via the error.php message parameter.
CVE-2018-1000113 Medium 2018-03-13 No exploit published No public exploit A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript
CVE-2018-7668 High 2018-03-05 Not applicable No public exploit TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
CVE-2015-7391 Medium 2017-09-26 Not applicable No public exploit Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.9.14 allow remote attackers to inject arbitrary web script or HTML via the (1) selected_end_date or (2) selected_start_date parameter to lib/results/tcCreatedPerUserOnTestProject.php; the (3) containerType parameter to lib/testcases/containerEdit.php; the (4) filter_tc_id or (5) filter_testcase_name parameter to lib/testcases/listTestCases.php; the (6) useRecursion parameter to lib/testcases/tcImport.php; the (7) targetTestCase or (8) created_by parameter to lib/testcases/tcSearch.php; or the (9) HTTP Referer header to third_party/user_contribution/fakeRemoteExecServer/client4fakeXMLRPCTestRunner.php.
CVE-2015-7390 Critical 2017-09-26 Not applicable No public exploit SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php.
CVE-2014-8082 Medium 2014-10-31 Not applicable No public exploit lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via unspecified vectors, which reveals the installation path in an error message.
CVE-2014-8081 High 2014-10-31 Not applicable No public exploit lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the filter_result_result parameter.
CVE-2012-0939 Medium 2014-08-14 Not applicable No public exploit Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execute arbitrary SQL commands via the req_spec_id parameter to (1) reqSpecAnalyse.php, (2) reqSpecPrint.php, or (3) reqSpecView.php in requirements/. NOTE: some of these details are obtained from third party information.
CVE-2008-5807 Medium 2008-12-31 Not applicable No public exploit Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) Testproject Names and (2) Testplan Names in planEdit.php, and possibly (3) Testcaseprefixes in projectview.tpl.
CVE-2007-6006 High 2007-11-15 Not applicable No public exploit TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors.