TestLink is prone to multiple security vulnerabilities, including: 1. An arbitrary file-upload vulnerability 2. An information-disclosure vulnerability 3. A cross-site request-forgery vulnerability Exploiting these vulnerabilities may allow an attacker to harvest sensitive information, upload and execute arbitrary server side code in the context of the web server, or perform unauthorized actions on behalf of a user in the context of the site. This may aid in launching further attacks.

• http://www.securityfocus.com/bid/54990
• http://www.teamst.org/

---

Updated on 2015-03-25