HuangYuHsiangPhone/CVEs

HuangYuHsiangPhone/CVEs

Releases0
Stars3

CVE History

CVEPublishedCVSS v3CVSS v2
8.8 HIGH

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.

5.4 MEDIUM

TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php.

7.2 HIGH

TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.

7.2 HIGH

TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php