Security Advisory
CVE-2018-7668
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.