CVE-2019-20107 Detail
Current Description
Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to keywordsView.php; the (2) req_spec_id parameter to reqSpecCompareRevisions.php; the (3) requirement_id parameter to reqCompareVersions.php; the (4) build_id parameter to planUpdateTC.php; the (5) tplan_id parameter to newest_tcversions.php; the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) testcase_id parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration.
Source: MITRE
View Analysis Description
Analysis Description
Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to keywordsView.php; the (2) req_spec_id parameter to reqSpecCompareRevisions.php; the (3) requirement_id parameter to reqCompareVersions.php; the (4) build_id parameter to planUpdateTC.php; the (5) tplan_id parameter to newest_tcversions.php; the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) testcase_id parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration.
Source: MITRE
Severity
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) | NIST |
Known Affected Software Configurations Switch to CPE 2.2
Configuration 1 ( hide )
Change History
2 change records found – show changes
Initial Analysis – 3/6/2020 8:30:01 PM
| Action | Type | Old Value | New Value |
|---|---|---|---|
| Added | CPE Configuration |
OR
*cpe:2.3:a:testlink:testlink:*:*:*:*:*:*:*:* versions up to (including) 1.9.19
|
|
| Added | CVSS V2 |
NIST (AV:N/AC:L/Au:S/C:P/I:P/A:P) |
|
| Added | CVSS V3.1 |
NIST AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| Added | CWE |
NIST CWE-89 |
|
| Changed | Reference Type |
http://mantis.testlink.org/view.php?id=8829 No Types Assigned |
http://mantis.testlink.org/view.php?id=8829 Vendor Advisory |
| Changed | Reference Type |
http://mantis.testlink.org/view.php?id=8829#c29360 No Types Assigned |
http://mantis.testlink.org/view.php?id=8829#c29360 Vendor Advisory |
| Changed | Reference Type |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/146b4f38010a48c36b7d9650060ca354c92ab4ac No Types Assigned |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/146b4f38010a48c36b7d9650060ca354c92ab4ac Patch, Third Party Advisory |
| Changed | Reference Type |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/7647a7b53ceab31524cfcfb3beb8435af0a30fc1 No Types Assigned |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/7647a7b53ceab31524cfcfb3beb8435af0a30fc1 Patch, Third Party Advisory |
| Changed | Reference Type |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/942c406fcee5d376235a264cb8a79300a0002d20 No Types Assigned |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/942c406fcee5d376235a264cb8a79300a0002d20 Patch, Third Party Advisory |
| Changed | Reference Type |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/bcf7b971b5c88ea08d2dc47685f319be3b02cea8 No Types Assigned |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/bcf7b971b5c88ea08d2dc47685f319be3b02cea8 Patch, Third Party Advisory |
| Changed | Reference Type |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/d27690c6cb7708a6db0701b6428381d32d51495a No Types Assigned |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/d27690c6cb7708a6db0701b6428381d32d51495a Patch, Third Party Advisory |
| Changed | Reference Type |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/e2d88c9d7f8e02640ba65e5ff74b55d0399a53d0 No Types Assigned |
https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/e2d88c9d7f8e02640ba65e5ff74b55d0399a53d0 Patch, Third Party Advisory |
| Changed | Reference Type |
https://twitter.com/TLOpenSource/status/1212394020946751489 No Types Assigned |
https://twitter.com/TLOpenSource/status/1212394020946751489 Third Party Advisory |
CVE Modified by MITRE – 3/5/2020 11:15:11 AM
| Action | Type | Old Value | New Value |
|---|---|---|---|
| Added | Reference |
http://mantis.testlink.org/view.php?id=8829#c29360 [No Types Assigned] |
Quick Info
CVE Dictionary Entry:
CVE-2019-20107
NVD Published Date:
03/05/2020
NVD Last Modified:
03/06/2020