CVE-2012-4927

CVE-2012-4927 affects LimeSurvey (PHPSurveyor) systems, where SQL injection is possible through the fieldnames parameter in index.php for versions before 1.91+ Build 120224. This could allow remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability...

CVE-2012-4927

SQL injection vulnerability in Limesurvey a.k.a PHPSurveyor before 1.91+ Build 120224 and earlier allows remote attackers to execute arbitrary SQL commands via the fieldnames parameter to index.php...