Description

SQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php in LimeSurvey 2.06+ allows remote authenticated users to execute arbitrary SQL commands via the closedate parameter.

Remediation

References

CVE-2015-5078

Related Vulnerabilities

MySQL CVE-2023-21882 Vulnerability (CVE-2023-21882)

WordPress Plugin Super CAPTCHA 'admin.php' SQL Injection (2.2.4)

Nginx Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20372)

WordPress Plugin wp audio gallery playlist 'playlist.php' SQL Injection (0.12)

ownCloud Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-35947)

Severity

Medium

Classification

CVE-2015-5078 CWE-138

Tags

Missing Update Known Vulnerabilities