critical9.8
CVE-2015-7390
SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php.
Impact
SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Testlink | Testlink | through 1.9.13 |