Description
LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.
Remediation
References
Related Vulnerabilities
GlassFish CVE-2017-3247 Vulnerability (CVE-2017-3247)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0372)
MySQL CVE-2021-2164 Vulnerability (CVE-2021-2164)
WordPress Plugin YITH WooCommerce Gift Cards Security Bypass (1.3.7)
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6819)