CVE-2008-2571

2008-06-0618:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a “modify quota” action.

References

secunia.com/advisories/30495

sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922

www.limesurvey.org/content/view/102/1/lang%2Cen/

www.securityfocus.com/bid/29506

exchange.xforce.ibmcloud.com/vulnerabilities/42807