CVE-2019-20107

Description

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to keywordsView.php; the (2) req_spec_id parameter to reqSpecCompareRevisions.php; the (3) requirement_id parameter to reqCompareVersions.php; the (4) build_id parameter to planUpdateTC.php; the (5) tplan_id parameter to newest_tcversions.php; the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) testcase_id parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration.

Weakness classification

• CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Primary references

• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory