Immunity Canvas: LIMESURVEY_INCLUDE

Name| limesurveyinclude ---|--- CVE| CVE-2007-3632 Exploit Pack| CANVAS Description| LimeSurvey Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Limesurvey.org CVE Url: https://vulners.com/cve/CVE-2007-3632 CVE Name: CVE-2007-3632...

CVE-2007-3632

LimeSurvey (aka PHPSurveyor) 1.49RC2 contains multiple PHP remote file inclusion flaws exploitable via the homedir parameter to various admin/classes/pear/ and Spreadsheet/Excel/Writer PHP files, enabling remote code execution. Root cause is unsafely including remote files based on user input. No...