NVD

Id
33013  
Name
CVE-2014-5308  
Description
Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL commands via the (1) name parameter in a Search action to lib/project/projectView.php or (2) id parameter to lib/events/eventinfo.php.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-10-08  
Modified Date
2014-10-09  
Seq
2014-5308  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173270 33013 CVE-2014-5308 http://packetstormsecurity.com/files/128521/TestLink-1.9.11-SQL-Injection.html  View
173271 33013 CVE-2014-5308 20141001 CVE-2014-5308 - Multiple SQL Injection Vulnerabilities in TestLink  View
173272 33013 CVE-2014-5308 20141001 Re: CVE-2014-5308 - Multiple SQL Injection Vulnerabilities in TestLink  View
173273 33013 CVE-2014-5308 34863  View
173274 33013 CVE-2014-5308 70207  View
173275 33013 CVE-2014-5308 https://gitorious.org/testlink-ga/testlink-code/commit/7a099737b4c739bf083df016c0a99f66dd8ac0b3  View
173276 33013 CVE-2014-5308 https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5308  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15748 JVNDB-2014-004623 TestLink における SQL インジェクションの脆弱性 TestLink には、SQL インジェクションの脆弱性が存在します。 CVE-2014-5308 72597 CVE-2014-5308 33013 9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004623.html 2014-08-01 2014-10-10 View