CVE-2015-7390: Testlink

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php.

Affected products

• Testlink Testlink: up to and including 1.9.13

Published 2017-09-26. Last modified 2026-06-17.