[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2012-0938":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":24,"references":26,"score":36,"epss_score":37,"epss_percentile":38,"is_kev":39,"cisa_kev_date_added":40,"cisa_kev_due_date":40,"cisa_ssvc":41,"attack_mappings":47,"exploits":54},159819,"CVE-2012-0938","EUVD-2012-0961","Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with certain permissions to execute arbitrary SQL commands via the root_node parameter in the display_children function to (1) getrequirementnodes.php or (2) gettprojectnodes.php in lib\u002Fajax\u002F; the (3) cfield_id parameter in an edit action to lib\u002Fcfields\u002FcfieldsEdit.php; the (4) id parameter in an edit action or (5) plan_id parameter in a create action to lib\u002Fplan\u002FplanMilestonesEdit.php; or the req_spec_id parameter to (6) reqImport.php or (7) in a create action to reqEdit.php in lib\u002Frequirements\u002F.  NOTE: some of these details are obtained from third party information.","2014-08-14T14:55:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.5,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL","LOW",true,[20],"CWE-89",[22,23],"cpe:2.3:a:testlink:testlink:1.9.3:*:*:*:*:*:*:*","cpe:2.3:a:testlink:testlink:1.8.5b:*:*:*:*:*:*:*",[25],"Testlink Testlink",[27,28,29,30,31,32,33,34,35],"http:\u002F\u002Farchives.neohapsis.com\u002Farchives\u002Fbugtraq\u002F2012-02\u002F0104.html","http:\u002F\u002Fosvdb.org\u002F79450","http:\u002F\u002Fosvdb.org\u002F79451","http:\u002F\u002Fosvdb.org\u002F79452","http:\u002F\u002Fosvdb.org\u002F79453","http:\u002F\u002Fosvdb.org\u002F79454","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F48054","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F52086","https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F73327",0.53,0.05837,0.93115,false,null,{"timestamp":40,"automatable":42,"tech_impact":43,"exploitation":44,"cisa_decision":45,"cisa_remediation_timeline":46},"no","partial","none",{},"FSU",[48],{"name":49,"source":50,"tactics":51,"technique_id":53},"Exploit Public-Facing Application","attack_vector",[52],"initial-access","T1190",[]]