Unrated severityNVD Advisory· Published Oct 8, 2014· Updated Jun 17, 2026

CVE-2014-5308

Description

Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL commands via the (1) name parameter in a Search action to lib/project/projectView.php or (2) id parameter to lib/events/eventinfo.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Testlink/Testlink2 versions
cpe:2.3:a:testlink:testlink:1.9.11:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:testlink:testlink:1.9.11:*:*:*:*:*:*:*
- (no CPE)range: =1.9.11

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/128521/TestLink-1.9.11-SQL-Injection.htmlnvdExploit
seclists.org/fulldisclosure/2014/Oct/11nvdExploit
seclists.org/fulldisclosure/2014/Oct/13nvdExploit
www.exploit-db.com/exploits/34863nvdExploit
gitorious.org/testlink-ga/testlink-code/commit/7a099737b4c739bf083df016c0a99f66dd8ac0b3nvdExploit
www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5308nvdExploit
osvdb.org/show/osvdb/112524nvd
www.securityfocus.com/bid/70207nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000