Description
A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.
Remediation
References
Related Vulnerabilities
Oracle Database Server Missing Authentication for Critical Function Vulnerability (CVE-2026-47038)
PHP Cryptographic Issues Vulnerability (CVE-2010-1128)
Oracle Database Server Other Vulnerability (CVE-2006-2081)
Apache HTTP Server CVE-2019-0190 Vulnerability (CVE-2019-0190)
ATutor Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-3368)