PT-2015-6770
CVE-2015-5078
·
تاريخ النشر
2015-06-28
·
تاريخ التحديث
2016-12-07
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
LimeSurvey versions 2.06 and later
Description
The issue allows remote authenticated users to execute arbitrary SQL commands via the
closedate parameter in the insert function in application/controllers/admin/dataentry.php.Recommendations
For LimeSurvey versions 2.06 and later, update to a version that includes a fix for this issue, as using the
closedate parameter can lead to execution of arbitrary SQL commands. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾