Data Illusion Zumbrunn NGSurvey Enterprise Edition 安全漏洞

Data Illusion Zumbrunn NGSurvey Enterprise Edition is a questionnaire and data collection system from the Swiss company Data Illusion Zumbrunn. A security vulnerability exists in Data Illusion Zumbrunn NGSurvey Enterprise Edition version 3.6.4, which stems from improper coding of survey content a...

CVE-2025-15479: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS, CWE-79 in the survey content and administration functionality in Data Illusion Zumbrunn NGSurvey Enterprise Edition 3.6.4 on all supported platforms on Windows and Linux servers allows authenticated remote users with survey creation or edit privileges to execute...

Data Illusion Zumbrunn NGSurvey 安全漏洞

Data Illusion Zumbrunn NGSurvey is an online survey and data collection platform from Data Illusion Zumbrunn, Inc. A security vulnerability exists in Data Illusion Zumbrunn NGSurvey that stems from improper authorization and could allow an arbitrarily logged-in user to gain access to other users'...

CVE-2025-13829: Incorrect Authorization

Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Critical information retrieved: APIKEY 1 year user Session RefreshToken 10 minutes user Session Password hashed with bcrypt User IP Email Full Na...