PT-2009-6399 · Testlink Team · Testlink

Published 2009-12-10 · Updated 2024-02-14 · CVE-2009-4237

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TestLink versions prior to 1.8.5

Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including the req parameter to "login.php", and allows remote authenticated users to inject arbitrary web script or HTML via parameters such as key to "lib/general/staticPage.php", tableName to "lib/attachments/attachmentupload.php", startDate, endDate, or logLevel to "lib/events/eventviewer.php", search notes string to "lib/results/resultsMoreBuilds buildReport.php", and expected results, name, steps, or summary in a find action to "lib/testcases/searchData.php".

Recommendations For versions prior to 1.8.5, update to version 1.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable parameters, such as req, key, tableName, startDate, endDate, logLevel, search notes string, expected results, name, steps, and summary, until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-4237

Affected Products

Testlink

References · 11

• 🔥 http://coresecurity.com/content/testlink-multiple-injection-vulnerabilities · Exploit
• 🔥 http://securityfocus.com/bid/37258 · Exploit
• 🔥 https://exploit-db.com/exploits/10364 · Exploit
• http://teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4237 · Security Note
• http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html · Note
• http://osvdb.org/60915 · Note
• http://osvdb.org/60916 · Note
• http://osvdb.org/60918 · Note
• http://osvdb.org/60914 · Note
• http://osvdb.org/60917 · Note