CVE-2012-0939

Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execute arbitrary SQL commands via the req_spec_id parameter to (1) reqSpecAnalyse.php, (2) reqSpecPrint.php, or (3) reqSpecView.php in requirements/. NOTE: some of these details are obtained from third party information.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:testlink:testlink:1.8.5b:*:*:*:*:*:*:*
cpe:2.3:a:testlink:testlink:1.9.3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-08-14 14:55

Updated : 2024-02-04 18:35


NVD link : CVE-2012-0939

Mitre link : CVE-2012-0939

CVE.ORG link : CVE-2012-0939


JSON object : View

Products Affected

testlink

  • testlink
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')