Description
SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information.
Remediation
References
Related Vulnerabilities
MediaWiki CVE-2022-28206 Vulnerability (CVE-2022-28206)
WordPress Plugin Facebook With Login Multiple Vulnerabilities (1.0)
WebLogic Improper Handling of Exceptional Conditions Vulnerability (CVE-2017-5638)
Oracle JRE CVE-2013-5774 Vulnerability (CVE-2013-5774)
Python Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-9233)