CVE-2019-20107

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to keywordsView.php; the (2) req_spec_id parameter to reqSpecCompareRevisions.php; the (3) requirement_id parameter to reqCompareVersions.php; the (4) build_id parameter to planUpdateTC.php; the (5) tplan_id parameter to newest_tcversions.php; the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) testcase_id parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration.

• CWE-89

• http://mantis.testlink.org/view.php?id=8829Vendor Advisory
• http://mantis.testlink.org/view.php?id=8829#c29360Vendor Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/146b4f38010a48c36b7d9650060ca354c92ab4acPatch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/7647a7b53ceab31524cfcfb3beb8435af0a30fc1Patch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/942c406fcee5d376235a264cb8a79300a0002d20Patch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/bcf7b971b5c88ea08d2dc47685f319be3b02cea8Patch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/d27690c6cb7708a6db0701b6428381d32d51495aPatch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/e2d88c9d7f8e02640ba65e5ff74b55d0399a53d0Patch, Third Party Advisory
• https://twitter.com/TLOpenSource/status/1212394020946751489Third Party Advisory
• http://mantis.testlink.org/view.php?id=8829Vendor Advisory
• http://mantis.testlink.org/view.php?id=8829#c29360Vendor Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/146b4f38010a48c36b7d9650060ca354c92ab4acPatch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/7647a7b53ceab31524cfcfb3beb8435af0a30fc1Patch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/942c406fcee5d376235a264cb8a79300a0002d20Patch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/bcf7b971b5c88ea08d2dc47685f319be3b02cea8Patch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/d27690c6cb7708a6db0701b6428381d32d51495aPatch, Third Party Advisory
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/e2d88c9d7f8e02640ba65e5ff74b55d0399a53d0Patch, Third Party Advisory
• https://twitter.com/TLOpenSource/status/1212394020946751489Third Party Advisory

Published

Mar 5, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20100The Atlassian Application Links plugin is vulnerable to cros…4.7
• CVE-2019-20101Affected versions of Atlassian Jira Server and Data Center a…5.3
• CVE-2019-20102The attachment-uploading feature in Atlassian Confluence Ser…6.1
• CVE-2019-20104The OpenID client application in Atlassian Crowd before vers…7.5
• CVE-2019-20105The EditApplinkServlet resource in the Atlassian Application…4.9
• CVE-2019-20106Comment properties in Atlassian Jira Server and Data Center …4.3
• CVE-2019-2011In readNullableNativeHandleNoDup of Parcel.cpp, there is a p…
• CVE-2019-2012In rw_t3t_act_handle_fmt_rsp of rw_t3t.cc, there is a possib…
• CVE-2019-2013In rw_t3t_act_handle_sro_rsp of rw_t3t.cc, there is a possib…
• CVE-2019-20138The HTTP Authentication library before 2019-12-27 for Nim ha…7.5
• CVE-2019-20139In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host…5.4
• CVE-2019-2014In rw_t3t_handle_get_sc_poll_rsp of rw_t3t.cc, there is a po…