CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000659

LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulnerability in file upload functionality that can result in remote code execution as authenticated user. This attack appear to be exploitable via An authenticated user can upload a specially crafted zip file to get remote code execution. This vulnerability appears to have been fixed in after commit 72a02ebaaf95a80e26127ee7ee2b123cccce05a7 / version 3.14.4.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.022

EPSS Ranking 83.3%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2018-1000659

Limesurvey » Limesurvey » Version: 1.01

cpe:2.3:a:limesurvey:limesurvey:1.01
Limesurvey » Limesurvey » Version: 1.45

cpe:2.3:a:limesurvey:limesurvey:1.45
Limesurvey » Limesurvey » Version: 1.50

cpe:2.3:a:limesurvey:limesurvey:1.50
Limesurvey » Limesurvey » Version: 1.52

cpe:2.3:a:limesurvey:limesurvey:1.52
Limesurvey » Limesurvey » Version: 1.53

cpe:2.3:a:limesurvey:limesurvey:1.53
Limesurvey » Limesurvey » Version: 1.53+

cpe:2.3:a:limesurvey:limesurvey:1.53+
Limesurvey » Limesurvey » Version: 1.70

cpe:2.3:a:limesurvey:limesurvey:1.70
Limesurvey » Limesurvey » Version: 1.70+

cpe:2.3:a:limesurvey:limesurvey:1.70+
Limesurvey » Limesurvey » Version: 1.71

cpe:2.3:a:limesurvey:limesurvey:1.71
Limesurvey » Limesurvey » Version: 1.71+

cpe:2.3:a:limesurvey:limesurvey:1.71+
Limesurvey » Limesurvey » Version: 1.72

cpe:2.3:a:limesurvey:limesurvey:1.72
Limesurvey » Limesurvey » Version: 1.80

cpe:2.3:a:limesurvey:limesurvey:1.80
Limesurvey » Limesurvey » Version: 1.80+

cpe:2.3:a:limesurvey:limesurvey:1.80+
Limesurvey » Limesurvey » Version: 1.81

cpe:2.3:a:limesurvey:limesurvey:1.81
Limesurvey » Limesurvey » Version: 1.81+

cpe:2.3:a:limesurvey:limesurvey:1.81+
Limesurvey » Limesurvey » Version: 1.82

cpe:2.3:a:limesurvey:limesurvey:1.82
Limesurvey » Limesurvey » Version: 1.82+

cpe:2.3:a:limesurvey:limesurvey:1.82+
Limesurvey » Limesurvey » Version: 1.85

cpe:2.3:a:limesurvey:limesurvey:1.85
Limesurvey » Limesurvey » Version: 1.86

cpe:2.3:a:limesurvey:limesurvey:1.86
Limesurvey » Limesurvey » Version: 1.87

cpe:2.3:a:limesurvey:limesurvey:1.87
Limesurvey » Limesurvey » Version: 1.87+

cpe:2.3:a:limesurvey:limesurvey:1.87+
Limesurvey » Limesurvey » Version: 1.90

cpe:2.3:a:limesurvey:limesurvey:1.90
Limesurvey » Limesurvey » Version: 1.90+

cpe:2.3:a:limesurvey:limesurvey:1.90+
Limesurvey » Limesurvey » Version: 1.91

cpe:2.3:a:limesurvey:limesurvey:1.91
Limesurvey » Limesurvey » Version: 1.91+

cpe:2.3:a:limesurvey:limesurvey:1.91+
Limesurvey » Limesurvey » Version: 1.92

cpe:2.3:a:limesurvey:limesurvey:1.92
Limesurvey » Limesurvey » Version: 2.00

cpe:2.3:a:limesurvey:limesurvey:2.00
Limesurvey » Limesurvey » Version: 2.05

cpe:2.3:a:limesurvey:limesurvey:2.05
Limesurvey » Limesurvey » Version: 2.05+

cpe:2.3:a:limesurvey:limesurvey:2.05+
Limesurvey » Limesurvey » Version: 2.06

cpe:2.3:a:limesurvey:limesurvey:2.06
Limesurvey » Limesurvey » Version: 2.06+

cpe:2.3:a:limesurvey:limesurvey:2.06+
Limesurvey » Limesurvey » Version: 2.50

cpe:2.3:a:limesurvey:limesurvey:2.50
Limesurvey » Limesurvey » Version: 2.50.1

cpe:2.3:a:limesurvey:limesurvey:2.50.1
Limesurvey » Limesurvey » Version: 2.51.0

cpe:2.3:a:limesurvey:limesurvey:2.51.0
Limesurvey » Limesurvey » Version: 2.51.1

cpe:2.3:a:limesurvey:limesurvey:2.51.1
Limesurvey » Limesurvey » Version: 2.51.2

cpe:2.3:a:limesurvey:limesurvey:2.51.2
Limesurvey » Limesurvey » Version: 2.51.3

cpe:2.3:a:limesurvey:limesurvey:2.51.3
Limesurvey » Limesurvey » Version: 2.51.4

cpe:2.3:a:limesurvey:limesurvey:2.51.4
Limesurvey » Limesurvey » Version: 2.52.0

cpe:2.3:a:limesurvey:limesurvey:2.52.0
Limesurvey » Limesurvey » Version: 2.53.0

cpe:2.3:a:limesurvey:limesurvey:2.53.0
Limesurvey » Limesurvey » Version: 2.54.0

cpe:2.3:a:limesurvey:limesurvey:2.54.0
Limesurvey » Limesurvey » Version: 2.54.1

cpe:2.3:a:limesurvey:limesurvey:2.54.1
Limesurvey » Limesurvey » Version: 2.54.2

cpe:2.3:a:limesurvey:limesurvey:2.54.2
Limesurvey » Limesurvey » Version: 2.54.3

cpe:2.3:a:limesurvey:limesurvey:2.54.3
Limesurvey » Limesurvey » Version: 2.54.4

cpe:2.3:a:limesurvey:limesurvey:2.54.4
Limesurvey » Limesurvey » Version: 2.54.5

cpe:2.3:a:limesurvey:limesurvey:2.54.5
Limesurvey » Limesurvey » Version: 2.55.0

cpe:2.3:a:limesurvey:limesurvey:2.55.0
Limesurvey » Limesurvey » Version: 2.55.1

cpe:2.3:a:limesurvey:limesurvey:2.55.1
Limesurvey » Limesurvey » Version: 2.55.2

cpe:2.3:a:limesurvey:limesurvey:2.55.2
Limesurvey » Limesurvey » Version: 2.55.3

cpe:2.3:a:limesurvey:limesurvey:2.55.3
Limesurvey » Limesurvey » Version: 2.56.0

cpe:2.3:a:limesurvey:limesurvey:2.56.0
Limesurvey » Limesurvey » Version: 2.56.1

cpe:2.3:a:limesurvey:limesurvey:2.56.1
Limesurvey » Limesurvey » Version: 2.57.0

cpe:2.3:a:limesurvey:limesurvey:2.57.0
Limesurvey » Limesurvey » Version: 2.57.1

cpe:2.3:a:limesurvey:limesurvey:2.57.1
Limesurvey » Limesurvey » Version: 2.58.0

cpe:2.3:a:limesurvey:limesurvey:2.58.0
Limesurvey » Limesurvey » Version: 2.58.1

cpe:2.3:a:limesurvey:limesurvey:2.58.1
Limesurvey » Limesurvey » Version: 2.58.2

cpe:2.3:a:limesurvey:limesurvey:2.58.2
Limesurvey » Limesurvey » Version: 2.59.0

cpe:2.3:a:limesurvey:limesurvey:2.59.0
Limesurvey » Limesurvey » Version: 2.59.1

cpe:2.3:a:limesurvey:limesurvey:2.59.1
Limesurvey » Limesurvey » Version: 2.6.0

cpe:2.3:a:limesurvey:limesurvey:2.6.0
Limesurvey » Limesurvey » Version: 2.6.7

cpe:2.3:a:limesurvey:limesurvey:2.6.7
Limesurvey » Limesurvey » Version: 2.62.0

cpe:2.3:a:limesurvey:limesurvey:2.62.0
Limesurvey » Limesurvey » Version: 2.62.1

cpe:2.3:a:limesurvey:limesurvey:2.62.1
Limesurvey » Limesurvey » Version: 2.62.2

cpe:2.3:a:limesurvey:limesurvey:2.62.2
Limesurvey » Limesurvey » Version: 2.63.0

cpe:2.3:a:limesurvey:limesurvey:2.63.0
Limesurvey » Limesurvey » Version: 2.63.1

cpe:2.3:a:limesurvey:limesurvey:2.63.1
Limesurvey » Limesurvey » Version: 2.64.0

cpe:2.3:a:limesurvey:limesurvey:2.64.0
Limesurvey » Limesurvey » Version: 2.64.1

cpe:2.3:a:limesurvey:limesurvey:2.64.1
Limesurvey » Limesurvey » Version: 2.64.2

cpe:2.3:a:limesurvey:limesurvey:2.64.2
Limesurvey » Limesurvey » Version: 2.64.3

cpe:2.3:a:limesurvey:limesurvey:2.64.3
Limesurvey » Limesurvey » Version: 2.64.4

cpe:2.3:a:limesurvey:limesurvey:2.64.4
Limesurvey » Limesurvey » Version: 2.64.5

cpe:2.3:a:limesurvey:limesurvey:2.64.5
Limesurvey » Limesurvey » Version: 2.64.6

cpe:2.3:a:limesurvey:limesurvey:2.64.6
Limesurvey » Limesurvey » Version: 2.64.7

cpe:2.3:a:limesurvey:limesurvey:2.64.7
Limesurvey » Limesurvey » Version: 2.65.0

cpe:2.3:a:limesurvey:limesurvey:2.65.0
Limesurvey » Limesurvey » Version: 2.65.1

cpe:2.3:a:limesurvey:limesurvey:2.65.1
Limesurvey » Limesurvey » Version: 2.65.2

cpe:2.3:a:limesurvey:limesurvey:2.65.2
Limesurvey » Limesurvey » Version: 2.65.3

cpe:2.3:a:limesurvey:limesurvey:2.65.3
Limesurvey » Limesurvey » Version: 2.65.4

cpe:2.3:a:limesurvey:limesurvey:2.65.4
Limesurvey » Limesurvey » Version: 2.65.5

cpe:2.3:a:limesurvey:limesurvey:2.65.5
Limesurvey » Limesurvey » Version: 2.65.6

cpe:2.3:a:limesurvey:limesurvey:2.65.6
Limesurvey » Limesurvey » Version: 2.66.6

cpe:2.3:a:limesurvey:limesurvey:2.66.6
Limesurvey » Limesurvey » Version: 2.67.0

cpe:2.3:a:limesurvey:limesurvey:2.67.0
Limesurvey » Limesurvey » Version: 2.67.1

cpe:2.3:a:limesurvey:limesurvey:2.67.1
Limesurvey » Limesurvey » Version: 2.67.2

cpe:2.3:a:limesurvey:limesurvey:2.67.2
Limesurvey » Limesurvey » Version: 2.67.3

cpe:2.3:a:limesurvey:limesurvey:2.67.3
Limesurvey » Limesurvey » Version: 2.7.0

cpe:2.3:a:limesurvey:limesurvey:2.7.0
Limesurvey » Limesurvey » Version: 2.70.0

cpe:2.3:a:limesurvey:limesurvey:2.70.0
Limesurvey » Limesurvey » Version: 2.71.0

cpe:2.3:a:limesurvey:limesurvey:2.71.0
Limesurvey » Limesurvey » Version: 2.71.1

cpe:2.3:a:limesurvey:limesurvey:2.71.1
Limesurvey » Limesurvey » Version: 2.72.0

cpe:2.3:a:limesurvey:limesurvey:2.72.0
Limesurvey » Limesurvey » Version: 2.72.1

cpe:2.3:a:limesurvey:limesurvey:2.72.1
Limesurvey » Limesurvey » Version: 2.72.2

cpe:2.3:a:limesurvey:limesurvey:2.72.2
Limesurvey » Limesurvey » Version: 2.72.3

cpe:2.3:a:limesurvey:limesurvey:2.72.3
Limesurvey » Limesurvey » Version: 2.72.4

cpe:2.3:a:limesurvey:limesurvey:2.72.4
Limesurvey » Limesurvey » Version: 2.72.5

cpe:2.3:a:limesurvey:limesurvey:2.72.5
Limesurvey » Limesurvey » Version: 2.72.6

cpe:2.3:a:limesurvey:limesurvey:2.72.6
Limesurvey » Limesurvey » Version: 2.73.0

cpe:2.3:a:limesurvey:limesurvey:2.73.0
Limesurvey » Limesurvey » Version: 2.73.1

cpe:2.3:a:limesurvey:limesurvey:2.73.1
Limesurvey » Limesurvey » Version: 3.0.0

cpe:2.3:a:limesurvey:limesurvey:3.0.0
Limesurvey » Limesurvey » Version: 3.0.1

cpe:2.3:a:limesurvey:limesurvey:3.0.1
Limesurvey » Limesurvey » Version: 3.0.2

cpe:2.3:a:limesurvey:limesurvey:3.0.2
Limesurvey » Limesurvey » Version: 3.0.3

cpe:2.3:a:limesurvey:limesurvey:3.0.3
Limesurvey » Limesurvey » Version: 3.0.4

cpe:2.3:a:limesurvey:limesurvey:3.0.4
Limesurvey » Limesurvey » Version: 3.0.5

cpe:2.3:a:limesurvey:limesurvey:3.0.5
Limesurvey » Limesurvey » Version: 3.1.0

cpe:2.3:a:limesurvey:limesurvey:3.1.0
Limesurvey » Limesurvey » Version: 3.1.1

cpe:2.3:a:limesurvey:limesurvey:3.1.1
Limesurvey » Limesurvey » Version: 3.14.3

cpe:2.3:a:limesurvey:limesurvey:3.14.3
Limesurvey » Limesurvey » Version: 3.14.4

cpe:2.3:a:limesurvey:limesurvey:3.14.4
Limesurvey » Limesurvey » Version: 3.2.0

cpe:2.3:a:limesurvey:limesurvey:3.2.0
Limesurvey » Limesurvey » Version: 3.2.1

cpe:2.3:a:limesurvey:limesurvey:3.2.1
Limesurvey » Limesurvey » Version: 3.4.2

cpe:2.3:a:limesurvey:limesurvey:3.4.2
Limesurvey » Limesurvey » Version: 3.6.2

cpe:2.3:a:limesurvey:limesurvey:3.6.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000659

Products

Pricing

Contact Us