Posted by Egidio Romano on Oct 23

—————————————————————-
TestLink <= 1.9.12 (database.class.php) Path Disclosure Weakness
—————————————————————-

[-] Software Link:

http://testlink.org/

[-] Affected Versions:

Version 1.9.12 and prior versions.

[-] Weakness Description:

The vulnerable code is located in the /lib/functions/database.class.php script:

208….