CVE-2015-5078: SQL Injection
Published Jun 28, 2015
·Updated
SQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php in LimeSurvey 2.06+ allows remote authenticated users to execute arbitrary SQL commands via the closedate parameter.
Affected Software
1 affected component
Limesurvey LimeSurvey=2.06\+
Event History
Jun 28, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5078?
CVE-2015-5078 is classified as having a medium severity due to its potential for SQL injection exploits.
2
How do I fix CVE-2015-5078?
To fix CVE-2015-5078, upgrade to LimeSurvey version 2.06+ or apply appropriate input validation and sanitization methods.
3
Who is affected by CVE-2015-5078?
Remote authenticated users of LimeSurvey version 2.06+ are affected by CVE-2015-5078.
4
What type of vulnerability is CVE-2015-5078?
CVE-2015-5078 is an SQL injection vulnerability that allows execution of arbitrary SQL commands.
5
What parameters are involved in CVE-2015-5078?
The closedate parameter in the insert function of LimeSurvey is involved in CVE-2015-5078.