CVE-2012-0938

CVE-2012-0938 describes multiple SQL injection vulnerabilities in TestLink versions 1.9.3, 1.8.5b, and earlier, affecting various parameters across several PHP scripts. This vulnerability carries a CVSS score of 6.5 (Medium), indicating that an authenticated attacker can remotely exploit it with low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is a Metasploit module for an arbitrary file upload vulnerability in TestLink 1.9.3, it is not directly tied to this specific SQL injection CVE, and there is no evidence of active exploitation, public exploit code, or significant community discussion for CVE-2012-0938 itself.