WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product testlink✕
Overview 14 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
14matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 3public PoC21.4% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 14 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 14 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 14 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 21.4% Proof of concept only 2 14.3% Forecast only 0 0.0% No public exploit 9 64.3%
split by peak 4 / year
Not applicable: 14 High: 14 not blocked: 14 No public exploit: 9Proof of concept only: 2Working exploit published: 3
20071 Not applicable1 High1 not blocked1 No public exploit1 20080 20090 20100 20110 20120 20130 20142 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 20150 20160 20170 20182 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 20190 20204 Not applicable4 High4 not blocked4 Working exploit published1 No public exploit3 20210 20223 Not applicable3 High3 not blocked3 Proof of concept only1 No public exploit2 20231 Not applicable1 High1 not blocked1 No public exploit1 20241 Not applicable1 High1 not blocked1 Proof of concept only1
200820102012201420162018202020222024
14 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-46097 High 2024-09-27 Not applicable Proof of concept only TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges.
CVE-2023-50110 High 2023-12-30 Not applicable No public exploit TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.
CVE-2022-35196 High 2022-09-20 Not applicable Proof of concept only TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.
CVE-2022-35195 High 2022-09-16 Not applicable No public exploit TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php
CVE-2022-35193 High 2022-09-16 Not applicable No public exploit TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.
CVE-2020-12273 High 2020-04-27 Not applicable No public exploit In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.
CVE-2020-8639 High 2020-04-03 Not applicable Working exploit published An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to a publicly accessible directory of the application.
CVE-2019-20107 High 2020-03-05 Not applicable No public exploit Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to keywordsView.php; the (2) req_spec_id parameter to reqSpecCompareRevisions.php; the (3) requirement_id parameter to reqCompareVersions.php; the (4) build_id parameter to planUpdateTC.php; the (5) tplan_id parameter to newest_tcversions.php; the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) testcase_id parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration.
CVE-2020-8841 High 2020-02-10 Not applicable No public exploit An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection.
CVE-2018-7668 High 2018-03-05 Not applicable No public exploit TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
CVE-2018-7466 High 2018-02-25 Not applicable Working exploit published install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during installation to provide a long, crafted value.
CVE-2014-8081 High 2014-10-31 Not applicable No public exploit lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the filter_result_result parameter.
CVE-2014-5308 High 2014-10-08 Not applicable Working exploit published Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL commands via the (1) name parameter in a Search action to lib/project/projectView.php or (2) id parameter to lib/events/eventinfo.php.
CVE-2007-6006 High 2007-11-15 Not applicable No public exploit TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors.