Overview 33 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 7 public PoC · 0 EPSS ≥ 0.5
33matches
2in Waratek scope6.1%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
7public PoC21.2%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
2
6.1%
Outside Waratek scope
0
0.0%
Not applicable
31
93.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
33
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
7
21.2%
Proof of concept only
3
9.1%
Forecast only
0
0.0%
No public exploit
23
69.7%
split by
peak 8 / year
20071
Not applicable1
High1
not blocked1
No public exploit1
20081
Not applicable1
Medium1
not blocked1
No public exploit1
20092
Not applicable2
Medium1
Low1
not blocked2
Working exploit published2
20100
20110
20121
Not applicable1
Medium1
not blocked1
Working exploit published1
20130
20145
Not applicable5
High2
Medium3
not blocked5
Working exploit published2
No public exploit3
20150
20160
20172
Not applicable2
Critical1
Medium1
not blocked2
No public exploit2
20183
No exploit published1
Not applicable2
High2
Medium1
not blocked3
Working exploit published1
No public exploit2
20193
No exploit published1
Not applicable2
Medium3
not blocked3
No public exploit3
20208
Not applicable8
Critical3
High4
Medium1
not blocked8
Working exploit published1
No public exploit7
20210
20224
Not applicable4
High3
Medium1
not blocked4
Proof of concept only1
No public exploit3
20231
Not applicable1
High1
not blocked1
No public exploit1
20242
Not applicable2
High1
Medium1
not blocked2
Proof of concept only2
200820102012201420162018202020222024
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-46097 | High | 2024-09-27 | Not applicable | Proof of concept only | TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges. |
| CVE-2024-42906 | Medium | 2024-08-26 | Not applicable | Proof of concept only | TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name. |
| CVE-2023-50110 | High | 2023-12-30 | Not applicable | No public exploit | TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used. |
| CVE-2022-35196 | High | 2022-09-20 | Not applicable | Proof of concept only | TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php. |
| CVE-2022-35195 | High | 2022-09-16 | Not applicable | No public exploit | TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php |
| CVE-2022-35194 | Medium | 2022-09-16 | Not applicable | No public exploit | TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php. |
| CVE-2022-35193 | High | 2022-09-16 | Not applicable | No public exploit | TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php. |
| CVE-2020-12274 | Critical | 2020-04-27 | Not applicable | No public exploit | In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session. |
| CVE-2020-12273 | High | 2020-04-27 | Not applicable | No public exploit | In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials. |
| CVE-2020-8639 | High | 2020-04-03 | Not applicable | Working exploit published | An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to a publicly accessible directory of the application. |
| CVE-2020-8638 | Critical | 2020-04-03 | Not applicable | No public exploit | A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in planUrgency.php via the urgency parameter. |
| CVE-2020-8637 | Critical | 2020-04-03 | Not applicable | No public exploit | A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id parameter. |
| CVE-2019-20107 | High | 2020-03-05 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to keywordsView.php; the (2) req_spec_id parameter to reqSpecCompareRevisions.php; the (3) requirement_id parameter to reqCompareVersions.php; the (4) build_id parameter to planUpdateTC.php; the (5) tplan_id parameter to newest_tcversions.php; the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) testcase_id parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration. |
| CVE-2020-8841 | High | 2020-02-10 | Not applicable | No public exploit | An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection. |
| CVE-2019-20381 | Medium | 2020-01-20 | Not applicable | No public exploit | TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491. |
| CVE-2019-19491 | Medium | 2019-12-02 | Not applicable | No public exploit | TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request. |
| CVE-2019-10378 | Medium | 2019-08-07 | No exploit published | No public exploit | Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. |
| CVE-2019-14471 | Medium | 2019-08-01 | Not applicable | No public exploit | TestLink 1.9.19 has XSS via the error.php message parameter. |
| CVE-2018-1000113 | Medium | 2018-03-13 | No exploit published | No public exploit | A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript |
| CVE-2018-7668 | High | 2018-03-05 | Not applicable | No public exploit | TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php. |
| CVE-2018-7466 | High | 2018-02-25 | Not applicable | Working exploit published | install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during installation to provide a long, crafted value. |
| CVE-2015-7391 | Medium | 2017-09-26 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.9.14 allow remote attackers to inject arbitrary web script or HTML via the (1) selected_end_date or (2) selected_start_date parameter to lib/results/tcCreatedPerUserOnTestProject.php; the (3) containerType parameter to lib/testcases/containerEdit.php; the (4) filter_tc_id or (5) filter_testcase_name parameter to lib/testcases/listTestCases.php; the (6) useRecursion parameter to lib/testcases/tcImport.php; the (7) targetTestCase or (8) created_by parameter to lib/testcases/tcSearch.php; or the (9) HTTP Referer header to third_party/user_contribution/fakeRemoteExecServer/client4fakeXMLRPCTestRunner.php. |
| CVE-2015-7390 | Critical | 2017-09-26 | Not applicable | No public exploit | SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php. |
| CVE-2014-8082 | Medium | 2014-10-31 | Not applicable | No public exploit | lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via unspecified vectors, which reveals the installation path in an error message. |
| CVE-2014-8081 | High | 2014-10-31 | Not applicable | No public exploit | lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the filter_result_result parameter. |
| CVE-2014-5308 | High | 2014-10-08 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL commands via the (1) name parameter in a Search action to lib/project/projectView.php or (2) id parameter to lib/events/eventinfo.php. |
| CVE-2012-0939 | Medium | 2014-08-14 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execute arbitrary SQL commands via the req_spec_id parameter to (1) reqSpecAnalyse.php, (2) reqSpecPrint.php, or (3) reqSpecView.php in requirements/. NOTE: some of these details are obtained from third party information. |
| CVE-2012-0938 | Medium | 2014-08-14 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with certain permissions to execute arbitrary SQL commands via the root_node parameter in the display_children function to (1) getrequirementnodes.php or (2) gettprojectnodes.php in lib/ajax/; the (3) cfield_id parameter in an edit action to lib/cfields/cfieldsEdit.php; the (4) id parameter in an edit action or (5) plan_id parameter in a create action to lib/plan/planMilestonesEdit.php; or the req_spec_id parameter to (6) reqImport.php or (7) in a create action to reqEdit.php in lib/requirements/. NOTE: some of these details are obtained from third party information. |
| CVE-2012-2275 | Medium | 2012-09-15 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to lib/usermanagement/userInfo.php. |
| CVE-2009-4238 | Medium | 2009-12-10 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the Test Case ID field to lib/general/navBar.php or (2) the logLevel parameter to lib/events/eventviewer.php. |
| CVE-2009-4237 | Low | 2009-12-10 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via (2) the key parameter to lib/general/staticPage.php, (3) the tableName parameter to lib/attachments/attachmentupload.php, or the (4) startDate, (5) endDate, or (6) logLevel parameter to lib/events/eventviewer.php; (7) the search_notes_string parameter to lib/results/resultsMoreBuilds_buildReport.php; or the (8) expected_results, (9) name, (10) steps, or (11) summary parameter in a find action to lib/testcases/searchData.php, related to lib/functions/database.class.php. |
| CVE-2008-5807 | Medium | 2008-12-31 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) Testproject Names and (2) Testplan Names in planEdit.php, and possibly (3) Testcaseprefixes in projectview.tpl. |
| CVE-2007-6006 | High | 2007-11-15 | Not applicable | No public exploit | TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors. |