← All advisories

Critical severity9.8NVD Advisory· Published Sep 26, 2017· Updated Jun 17, 2026

CVE-2015-7390

CVE-2015-7390

Description

SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php.

Affected products

3

Testlink/Testlink Codeinferred
Range: <1.9.14
Testlink/Testlink2 versions
cpe:2.3:a:testlink:testlink:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:testlink:testlink:*:*:*:*:*:*:*:*range: <=1.9.13
- (no CPE)range: <1.9.14

Patches

Vulnerability mechanics

References

1

www.securityfocus.com/archive/1/536623/100/0/threadednvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.