Description

SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attackers to execute arbitrary SQL commands via the fieldnames parameter to index.php.

Remediation

References

CVE-2012-4927

Related Vulnerabilities

WordPress Plugin ARPrice-Responsive Pricing Table Cross-Site Request Forgery (2.3)

MySQL CVE-2016-0666 Vulnerability (CVE-2016-0666)

Ruby Improper Input Validation Vulnerability (CVE-2011-4815)

Drupal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-39261)

MediaWiki Insufficiently Protected Credentials Vulnerability (CVE-2020-29005)

Severity

High

Classification

CVE-2012-4927 CWE-138

Tags

Missing Update Known Vulnerabilities