CVE-2015-5078

LimeSurvey 2.06+ is affected by a SQL injection in the insert function (application/controllers/admin/dataentry.php) via the closedate parameter. The vulnerability allows a remote authenticated user to execute arbitrary SQL commands through this input. The root cause is an unsafely handled closed...