CVE-2009-4238: Teamst Testlink

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the Test Case ID field to lib/general/navBar.php or (2) the logLevel parameter to lib/events/eventviewer.php.

Affected products

• Teamst Testlink: version 1.7 only; version 1.7.1 only; version 1.7.2 only; version 1.7.3 only; version 1.7.4 only; version 1.8 only; …

Published 2009-12-10. Last modified 2026-06-16.