Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
limesurvey limesurvey 1.5.2 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2012-4927
SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) prior to 1.91+ Build 120224 and previous versions allows remote malicious users to execute arbitrary SQL commands via the fieldnames parameter to index.php.
Limesurvey Limesurvey 1.81
Limesurvey Limesurvey 1.80
Limesurvey Limesurvey 1.5.2
Limesurvey Limesurvey
Limesurvey Limesurvey 1.70
Limesurvey Limesurvey 1.49
Limesurvey Limesurvey 1.49 Rc2
Limesurvey Limesurvey 1.80\\+
Limesurvey Limesurvey 1.81\\+
Limesurvey Limesurvey 1.52
1 EDB exploit
6.8
CVSSv2
CVE-2007-5573
PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the rootdir parameter.
Limesurvey Limesurvey
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-35229
privilege escalation
local users
CVE-2024-5405
CVE-2024-27842
CVE-2024-5274
CVE-2024-5378
CVE-2024-34152
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started