Security TestLink 1.9.12 PHP Object Injection October 23, 2014 007admin TestLink versions 1.9.12 and below suffer from a PHP object injection vulnerability in execSetResults.php.