CVE-2012-4927: SQL Injection
First published: Sat Sep 15 2012(Updated: )
SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attackers to execute arbitrary SQL commands via the fieldnames parameter to index.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Limesurvey Limesurvey | ||
| Limesurvey Limesurvey | <=1.90\+ | |
| Limesurvey Limesurvey | =1.5.2 | |
| Limesurvey Limesurvey | =1.49 | |
| Limesurvey Limesurvey | =1.49-rc2 | |
| Limesurvey Limesurvey | =1.49_rc2 | |
| Limesurvey Limesurvey | =1.52 | |
| Limesurvey Limesurvey | =1.70 | |
| Limesurvey Limesurvey | =1.80 | |
| Limesurvey Limesurvey | =1.80-rc4 | |
| Limesurvey Limesurvey | =1.80\+ | |
| Limesurvey Limesurvey | =1.81 | |
| Limesurvey Limesurvey | =1.81\+ |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://freecode.com/projects/limesurvey/releases/342070
- http://osvdb.org/79459
- http://packetstormsecurity.org/files/110100/limesurvey-sql.txt
- http://secunia.com/advisories/48051
- http://www.exploit-db.com/exploits/18508
- http://www.limesurvey.org/en/stable-release
- http://www.securityfocus.com/bid/52114
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73395
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/limesurvey
- canonical/limesurvey limesurvey
- version/limesurvey limesurvey/1.90\+
- version/limesurvey limesurvey/1.5.2
- version/limesurvey limesurvey/1.49
- version/limesurvey limesurvey/1.49-rc2
- version/limesurvey limesurvey/1.49_rc2
- version/limesurvey limesurvey/1.52
- version/limesurvey limesurvey/1.70
- version/limesurvey limesurvey/1.80
- version/limesurvey limesurvey/1.80-rc4
- version/limesurvey limesurvey/1.80\+
- version/limesurvey limesurvey/1.81
- version/limesurvey limesurvey/1.81\+