Description

Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action.

Remediation

References

CVE-2008-2571

Related Vulnerabilities

WordPress Plugin CM Download Manager Arbitrary File Upload (2.8.5)

ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2539)

WordPress Plugin Virtue/Pinnacle ToolKit Unspecified Vulnerability (2.5)

WordPress Plugin 10WebAnalytics Cross-Site Request Forgery (1.2.8)

Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7829)

Severity

Medium

Classification

CVE-2008-2571 CWE-707

Tags

Missing Update Known Vulnerabilities