CVE-2008-5807

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-31 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) Testproject Names and (2) Testplan Names in planEdit.php, and possibly (3) Testcaseprefixes in projectview.tpl.

Affected products

Teamst Testlink: through 1.8; 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.8-beta1, 1.8-beta2

References

http://secunia.com/advisories/32599
http://sourceforge.net/project/shownotes.php?release_id=638751
http://www.securityfocus.com/bid/32173
https://exchange.xforce.ibmcloud.com/vulnerabilities/46431
http://secunia.com/advisories/32599
http://sourceforge.net/project/shownotes.php?release_id=638751
http://www.securityfocus.com/bid/32173
https://exchange.xforce.ibmcloud.com/vulnerabilities/46431

Get alerted when CVE-2008-5807 or the next vulnerability affects your stack