Researchers
Back
Yu-Hsiang
#11170
of 60,399
28.6
Total CVSS
Vulnerabilities
·
4
Medium
1
High
3
PT-2022-22627
2022-09-20
8.8
CVE-2022-35196
Testlink
Testlink
A Cross-Site Request Forgery (CSRF) issue was found via the "/lib/plan/planView.php" API endpoint.
PT-2022-22624
2022-09-16
7.2
CVE-2022-35193
Testlink
Testlink
The issue is a SQL injection vulnerability. It can be exploited via the /lib/execute/execNavigator.php endpoint.
PT-2022-22625
2022-09-16
5.4
CVE-2022-35194
Testlink
Testlink
A stored cross-site scripting (XSS) issue was found in TestLink via the /lib/inventory/inventoryView.php API endpoint.
PT-2022-22626
2022-09-16
7.2
CVE-2022-35195
Testlink
Testlink
A broken access control issue was found in TestLink at the "/lib/attachments/attachmentdownload.php" API endpoint.