CVE-2015-4628

CVE-2015-4628 describes an SQL injection in LimeSurvey (application/controllers/admin/questiongroups.php) affecting versions before 2.06+ Build 150618. The vulnerability allows a remote authenticated administrator to execute arbitrary SQL commands via the sid parameter. Connected sources consiste...