Show filters
222 Total Results
Displaying 171-180 of 222
Sort by:
Attacker Value
Unknown
CVE-2018-1000053
Disclosure Date: February 09, 2018 (last updated November 26, 2024)
LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be used to send a GET request to the affected endpoint.
0
Attacker Value
Unknown
CVE-2017-1002022
Disclosure Date: September 14, 2017 (last updated November 26, 2024)
Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.
0
Attacker Value
Unknown
CVE-2017-1002020
Disclosure Date: September 14, 2017 (last updated November 26, 2024)
Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable before placing it inside of an SQL query.
0
Attacker Value
Unknown
CVE-2017-1002021
Disclosure Date: September 14, 2017 (last updated November 26, 2024)
Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before placing it inside of an SQL query.
0
Attacker Value
Unknown
CVE-2015-5078
Disclosure Date: June 28, 2015 (last updated October 05, 2023)
SQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php in LimeSurvey 2.06+ allows remote authenticated users to execute arbitrary SQL commands via the closedate parameter.
0
Attacker Value
Unknown
CVE-2015-4628
Disclosure Date: June 18, 2015 (last updated October 05, 2023)
SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter.
0
Attacker Value
Unknown
CVE-2015-2090
Disclosure Date: February 26, 2015 (last updated October 05, 2023)
SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the survey_id parameter in an ajax_survey action to wp-admin/admin-ajax.php.
0
Attacker Value
Unknown
CVE-2014-6030
Disclosure Date: November 06, 2014 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to execute arbitrary SQL commands via the SurveyID parameter to survey/ReviewReadOnlySurvey.aspx or (2) remote authenticated users to execute arbitrary SQL commands via the SurveyID parameter to survey/UploadImagePopupToDb.aspx.
0
Attacker Value
Unknown
CVE-2014-7573
Disclosure Date: October 20, 2014 (last updated October 05, 2023)
The droid Survey Offline Forms (aka com.contact.droidSURVEY) application 2.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2014-6005
Disclosure Date: September 22, 2014 (last updated October 05, 2023)
The Survey.com Mobile (aka com.survey.android) application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
