Insufficient verification of data authenticity issue in Survey Maker before 3.6.4 allows a remote unauthenticated malicious user to spoof an IP address when posting.