Description

SQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php in LimeSurvey 2.06+ allows remote authenticated users to execute arbitrary SQL commands via the closedate parameter.

Remediation

References

CVE-2015-5078

Related Vulnerabilities

Zenphoto Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5595)

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-12529)

silverstripeCMS CVE-2020-6164 Vulnerability (CVE-2020-6164)

Internet Information Services Other Vulnerability (CVE-1999-1544)

WordPress Plugin PWG Random Cross-Site Request Forgery (1.11)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2015-5078