Posted by Onur Yilmaz on Oct 08

Information
——————–
Advisory by Netsparker.
Name: SQL Injection Vulnerability in TestLink 1.9.13
Affected Software : TestLink
Affected Versions: 1.9.1.3 and possibly below
Vendor Homepage : http://testlink.org/
Vulnerability Type : SQL Injection
Severity : Critical
Status : Fixed
CVE-ID : CVE-2015-7390
Netsparker Advisory Reference : NS-15-015

Description
——————–
If your web application is vulnerable to SQL injection, a…