Description

Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action.

Remediation

References

CVE-2008-2571

Related Vulnerabilities

WordPress Plugin Calendar Event Multi View Security Bypass (1.4.13)

WordPress Plugin Really Simple Gallery Cross-Site Scripting (1.4)

WordPress Plugin Ajax BootModal Login Security Bypass (1.4.3)

WordPress Plugin Keep Backup Daily Cross-Site Scripting (2.0.2)

WordPress Plugin Tera Charts Cross-Site Scripting (1.0)

Severity

Medium

Classification

CVE-2008-2571 CWE-707

Tags

Missing Update Known Vulnerabilities