CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-4628

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.4%

CVSS Severity

CVSS v2 Score 6.5

References

Products affected by CVE-2015-4628

Limesurvey » Limesurvey » Version: 1.01

cpe:2.3:a:limesurvey:limesurvey:1.01
Limesurvey » Limesurvey » Version: 1.45

cpe:2.3:a:limesurvey:limesurvey:1.45
Limesurvey » Limesurvey » Version: 1.50

cpe:2.3:a:limesurvey:limesurvey:1.50
Limesurvey » Limesurvey » Version: 1.52

cpe:2.3:a:limesurvey:limesurvey:1.52
Limesurvey » Limesurvey » Version: 1.53

cpe:2.3:a:limesurvey:limesurvey:1.53
Limesurvey » Limesurvey » Version: 1.53+

cpe:2.3:a:limesurvey:limesurvey:1.53+
Limesurvey » Limesurvey » Version: 1.70

cpe:2.3:a:limesurvey:limesurvey:1.70
Limesurvey » Limesurvey » Version: 1.70+

cpe:2.3:a:limesurvey:limesurvey:1.70+
Limesurvey » Limesurvey » Version: 1.71

cpe:2.3:a:limesurvey:limesurvey:1.71
Limesurvey » Limesurvey » Version: 1.71+

cpe:2.3:a:limesurvey:limesurvey:1.71+
Limesurvey » Limesurvey » Version: 1.72

cpe:2.3:a:limesurvey:limesurvey:1.72
Limesurvey » Limesurvey » Version: 1.80

cpe:2.3:a:limesurvey:limesurvey:1.80
Limesurvey » Limesurvey » Version: 1.80+

cpe:2.3:a:limesurvey:limesurvey:1.80+
Limesurvey » Limesurvey » Version: 1.81

cpe:2.3:a:limesurvey:limesurvey:1.81
Limesurvey » Limesurvey » Version: 1.81+

cpe:2.3:a:limesurvey:limesurvey:1.81+
Limesurvey » Limesurvey » Version: 1.82

cpe:2.3:a:limesurvey:limesurvey:1.82
Limesurvey » Limesurvey » Version: 1.82+

cpe:2.3:a:limesurvey:limesurvey:1.82+
Limesurvey » Limesurvey » Version: 1.85

cpe:2.3:a:limesurvey:limesurvey:1.85
Limesurvey » Limesurvey » Version: 1.86

cpe:2.3:a:limesurvey:limesurvey:1.86
Limesurvey » Limesurvey » Version: 1.87

cpe:2.3:a:limesurvey:limesurvey:1.87
Limesurvey » Limesurvey » Version: 1.87+

cpe:2.3:a:limesurvey:limesurvey:1.87+
Limesurvey » Limesurvey » Version: 1.90

cpe:2.3:a:limesurvey:limesurvey:1.90
Limesurvey » Limesurvey » Version: 1.90+

cpe:2.3:a:limesurvey:limesurvey:1.90+
Limesurvey » Limesurvey » Version: 1.91

cpe:2.3:a:limesurvey:limesurvey:1.91
Limesurvey » Limesurvey » Version: 1.91+

cpe:2.3:a:limesurvey:limesurvey:1.91+
Limesurvey » Limesurvey » Version: 1.92

cpe:2.3:a:limesurvey:limesurvey:1.92
Limesurvey » Limesurvey » Version: 2.00

cpe:2.3:a:limesurvey:limesurvey:2.00
Limesurvey » Limesurvey » Version: 2.05

cpe:2.3:a:limesurvey:limesurvey:2.05
Limesurvey » Limesurvey » Version: 2.05+

cpe:2.3:a:limesurvey:limesurvey:2.05+
Limesurvey » Limesurvey » Version: 2.06

cpe:2.3:a:limesurvey:limesurvey:2.06
Limesurvey » Limesurvey » Version: 2.06+

cpe:2.3:a:limesurvey:limesurvey:2.06+

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-4628

Products

Pricing

Contact Us