CVE-2015-4628

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated…

published June 18, 2015

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01551 · 74.9th percentile
Published
2015-06-18T10:00Z
EPSS history
Timeline
  • 18 JUN 10:00Z
    SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated…
    cvelistv5