Security Advisory

CVE-2020-8639

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-03 18:36:44

Last updated 2024-08-04 10:03:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to a publicly accessible directory of the application.

← Browse all CVEs View on cve.org ↗