limesurvey limesurvey 1.70 vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) prior to 1.91+ Build 120224 and previous versions allows remote malicious users to execute arbitrary SQL commands via the fieldnames parameter to index.php.

Limesurvey Limesurvey 1.81 Limesurvey Limesurvey 1.80 Limesurvey Limesurvey 1.5.2 Limesurvey Limesurvey Limesurvey Limesurvey 1.70 Limesurvey Limesurvey 1.49 Limesurvey Limesurvey 1.49 Rc2 Limesurvey Limesurvey 1.80\\+Limesurvey Limesurvey 1.81\\+Limesurvey Limesurvey 1.52

1 EDB exploit

Cross-site scripting (XSS) vulnerability in the tooltips in LimeSurvey prior to 1.91+ Build 11379-20111116, when viewing survey results, allows remote malicious users to inject arbitrary web script or HTML via unknown parameters.

Limesurvey Limesurvey 1.52 Limesurvey Limesurvey 1.53\\+Limesurvey Limesurvey 1.81\\+Limesurvey Limesurvey 1.71\\+Limesurvey Limesurvey 1.01 Limesurvey Limesurvey 1.85 Limesurvey Limesurvey 1.80\\+Limesurvey Limesurvey 1.82\\+Limesurvey Limesurvey Limesurvey Limesurvey 1.87\\+Limesurvey Limesurvey 1.86 Limesurvey Limesurvey 1.70\\+Limesurvey Limesurvey 1.50 Limesurvey Limesurvey 1.72 Limesurvey Limesurvey 1.90\\+

SQL injection vulnerability in admin/admin.php in LimeSurvey prior to 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information.

Limesurvey Limesurvey 1.90\\+Limesurvey Limesurvey 1.87\\+Limesurvey Limesurvey 1.70\\+Limesurvey Limesurvey 1.53\\+Limesurvey Limesurvey 1.86 Limesurvey Limesurvey 1.85 Limesurvey Limesurvey 1.52 Limesurvey Limesurvey 1.50 Limesurvey Limesurvey Limesurvey Limesurvey 1.72 Limesurvey Limesurvey 1.71\\+Limesurvey Limesurvey 1.82\\+Limesurvey Limesurvey 1.81\\+Limesurvey Limesurvey 1.80\\+Limesurvey Limesurvey 1.01

Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey prior to 1.91+ Build 120224 allows remote malicious users to inject arbitrary web script or HTML via the full_name parameter in a moduser action to admin/admin.php. NOTE: some of these details a...

Limesurvey Limesurvey 1.87\\+Limesurvey Limesurvey 1.86 Limesurvey Limesurvey 1.70\\+Limesurvey Limesurvey 1.85 Limesurvey Limesurvey 1.82\\+Limesurvey Limesurvey 1.52 Limesurvey Limesurvey 1.50 Limesurvey Limesurvey 1.01 Limesurvey Limesurvey Limesurvey Limesurvey 1.90\\+Limesurvey Limesurvey 1.72 Limesurvey Limesurvey 1.71\\+Limesurvey Limesurvey 1.53\\+Limesurvey Limesurvey 1.81\\+Limesurvey Limesurvey 1.80\\+

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook