SecuritySpace - CVE-2020-8639

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2020-8639

Description: An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to a publicly accessible directory of the application.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-8639
http://packetstormsecurity.com/files/161401/TestLink-1.9.20-Shell-Upload.html
https://ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection/

CVE ID:	CVE-2020-8639
Description:	An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to a publicly accessible directory of the application.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-8639 http://packetstormsecurity.com/files/161401/TestLink-1.9.20-Shell-Upload.html https://ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection/