CVE-2012-0939

no score yetEPSS 1.2%

testlink testlink: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execute arbitrary SQL commands via the req_spec_id parameter to (1) reqSpecAnalyse.php, (2) reqSpecPrint.php, or (3) reqSpecView.php in requirements/. NOTE: some of these details are obtained from third party information.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2014-08-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

testlink:testlink

References

http://archives.neohapsis.com/archives/bugtraq/2012-02/0104.html
http://osvdb.org/79447
http://osvdb.org/79448
http://osvdb.org/79449
http://secunia.com/advisories/48054

Check your stack JSON