Description

PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter.

Remediation

References

CVE-2007-5573

Related Vulnerabilities

WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)

GibbonEdu Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-34598)

WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.4.0)

Oracle Database Server CVE-2015-2595 Vulnerability (CVE-2015-2595)

Dot CMS Uncontrolled Recursion Vulnerability (CVE-2022-37034)

Severity

Medium

Classification

CVE-2007-5573 CWE-94

Tags

Missing Update Known Vulnerabilities