CVE-2012-4927

2012-09-1517:00:00

mitre

www.cve.org

8.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%

JSON

SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attackers to execute arbitrary SQL commands via the fieldnames parameter to index.php.

References

freecode.com/projects/limesurvey/releases/342070

osvdb.org/79459

packetstormsecurity.org/files/110100/limesurvey-sql.txt

secunia.com/advisories/48051

www.exploit-db.com/exploits/18508

www.limesurvey.org/en/stable-release

www.securityfocus.com/bid/52114

exchange.xforce.ibmcloud.com/vulnerabilities/73395