BID:37258

TestLink Cross Site Scripting and SQL Injection Vulnerabilities

Info

TestLink Cross Site Scripting and SQL Injection Vulnerabilities

Bugtraq ID:	37258
Class:	Input Validation Error
CVE:	CVE-2009-4237 CVE-2009-4238
Remote:	Yes
Local:	No
Published:	Dec 09 2009 12:00AM
Updated:	Dec 11 2009 06:54PM
Credit:	Pablo Annetta from Core Security Technologies
Vulnerable:	TestLink TestLink 1.8.4 TestLink TestLink 1.8.3 TestLink TestLink 1.8.2 TestLink TestLink 1.8.1 TestLink TestLink 1.8 TestLink TestLink 1.7.4 TestLink TestLink 1.7.1 TestLink TestLink 1.7 TestLink TestLink 1.8 RC1 TestLink TestLink 0

Not Vulnerable:	TestLink TestLink 1.8.5

Discussion

TestLink Cross Site Scripting and SQL Injection Vulnerabilities

TestLink is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to TestLink 1.8.5 are vulnerable.

Exploit / POC

TestLink Cross Site Scripting and SQL Injection Vulnerabilities

An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.

The following example URIs are available:

/data/vulnerabilities/exploits/37258.txt

Solution / Fix

TestLink Cross Site Scripting and SQL Injection Vulnerabilities

Solution:
Updates are available. Please see the references for details.

TestLink TestLink 0