CVE-2014-5017

SQL injection vulnerability in CPDB in application/controllers/admin/participantsaction.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to execute arbitrary SQL commands via the sidx parameter in a JSON request to admin/participants/sa/getParticipantsjson, related to a search paramet...

CVE-2014-5017

The CVE-2014-5017 entry describes an SQL injection in LimeSurvey 2.05+ Build 140618 (CPDB) affecting admin/participants/sa/getParticipants_json via the sidx parameter in a JSON request, related to a search parameter. The root cause is improper sanitization of the sidx value in CPDB’s code path (a...