Description (CNA)
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LimeSurvey / LimeSurvey | affected 7.0.5 |
CWE
CWE-89
References
- https://fluidattacks.com/es/advisories/rihanna
- https://github.com/LimeSurvey/LimeSurvey/
- https://github.com/LimeSurvey/LimeSurvey/commit/7735ce31cea1cad087b0c8556cb65a1c09e29cbd
ADP enrichment
No English description supplied.