VULNERABILITY INTELLIGENCE

CVE-2020-8637

CVSS score9.8 CRITICAL

EPSS probability2.94%

CISA KEVNot currently listed

Published2020-04-03

Last modified2026-06-17

Description

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id parameter.