CVE-2019-20107: SQL Injection
Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tprojectid parameter to keywordsView.php; the (2) reqspecid parameter to reqSpecCompareRevisions.php; the (3) requirementid parameter to reqCompareVersions.php; the (4) buildid parameter to planUpdateTC.php; the (5) tplanid parameter to newesttcversions.php; the (6) tplanid parameter to tcCreatedPerUserGUI.php; the (7) tcaseid parameter to tcAssign2Tplan.php; or the (8) testcaseid parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20107?
CVE-2019-20107 is considered a high-severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2019-20107?
To fix CVE-2019-20107, upgrade to TestLink version 1.9.20 or later where the vulnerabilities have been addressed.
Who can be affected by CVE-2019-20107?
Remote authenticated users with access to the vulnerable TestLink software versions can be affected by CVE-2019-20107.
What types of attacks can CVE-2019-20107 enable?
CVE-2019-20107 can enable attackers to execute arbitrary SQL commands against the database.
What components of TestLink are vulnerable in CVE-2019-20107?
The vulnerable components in TestLink related to CVE-2019-20107 include keywordsView.php, reqSpecCompareRevisions.php, and reqCompareVer.php.