CVE-2015-7390

Critical

Published: 26/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2015-7390 in TestLink before version 1.9.14 has an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the apikey parameter in lnl.php.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to exposure of sensitive information or data manipulation.

Recommendation

It is recommended to upgrade TestLink to version 1.9.14 or later to mitigate this vulnerability.

Original NVD description (English source)

SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php.