EUVD-2018-1814

Malware in sbrugna...

LimeSurvey Theme Uninstallation Cross-Site Request Forgery Vulnerability

LimeSurvey formerly known as PHPSurveyor is an open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution, and data collection.Theme Uninstallatio is one of the Theme Uninstallatio components. A cross-site request...

LimeSurvey < 3.3.1 CSRF Vulnerability

LimeSurvey contains a Cross ite Request Forgery CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-1000053

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery CSRF vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be us...

CVE-2018-1000053

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery CSRF vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be us...

Cross site request forgery (csrf)

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery CSRF vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be us...

CVE-2018-1000053

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery CSRF vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be us...

CVE-2018-1000053

LimeSurvey 3.0.0-beta.3+17110 contains a CSRF vulnerability in Theme Uninstallation that can cause an administrator’s themes to be deleted, rendering the site unusable. The issue is triggered by a crafted request (e.g., via simple HTML markup sending a GET to the affected endpoint). Publicly docu...

CVE-2018-1000053

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery CSRF vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be us...

CVE-2018-1000053: Cross-Site Request Forgery (CSRF)

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery CSRF vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be us...

PT-2018-9240

Name of the Vulnerable Software and Affected Versions: LimeSurvey version 3.0.0-beta.3+17110 Description: The issue concerns a Cross-Site Request Forgery CSRF vulnerability in the Theme Uninstallation feature. This vulnerability can be exploited to trick LimeSurvey administrators into deleting al...