CVE-2009-4238

Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the Test Case ID field to lib/general/navBar.php or (2) the logLevel parameter to lib/events/eventviewer.php.

• CWE-89

• http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html
• http://osvdb.org/60919
• http://osvdb.org/60920
• http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilitiesExploit
• http://www.securityfocus.com/bid/37258Exploit
• http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2Patch, Vendor Advisory, URL Repurposed
• http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html
• http://osvdb.org/60919
• http://osvdb.org/60920
• http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilitiesExploit
• http://www.securityfocus.com/bid/37258Exploit
• http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2Patch, Vendor Advisory, URL Repurposed

Published

Dec 10, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4232The Kide Shoutbox (com_kide) component 0.4.6 for Joomla! doe…
• CVE-2009-4233Cross-site scripting (XSS) vulnerability in modules/mod_yj_w…
• CVE-2009-4234Cross-site scripting (XSS) vulnerability in loginpages/error…
• CVE-2009-4235acpid 1.0.4 sets an unrestrictive umask, which might allow l…
• CVE-2009-4236The process function in data/class/pages/admin/customer/LC_P…
• CVE-2009-4237Multiple cross-site scripting (XSS) vulnerabilities in TestL…
• CVE-2009-4239Cross-site scripting (XSS) vulnerability in the Web console …
• CVE-2009-4240Multiple buffer overflows in unspecified setuid executables …
• CVE-2009-4241Heap-based buffer overflow in RealNetworks RealPlayer 10, Re…
• CVE-2009-4242Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer…
• CVE-2009-4243RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 thro…
• CVE-2009-4244Heap-based buffer overflow in RealNetworks RealPlayer 10; Re…