CVE-2015-5078: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php in LimeSurvey 2.06+ allows remote authenticated users to execute arbitrary SQL commands via the closedate parameter...

CVE-2005-2398: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands via 1 the sid, start, and id parameters to browse.php, the sid parameter to 2 dataentry.php, 3 export.php, 4 admin.php, 5 conditions.php, 6 spss.php, 7 deletesurvey.php, 8...

CVE-2005-2380

PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...

CVE-2005-2380: Undefined Security Weakness

Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the 1 sid, 2 start, and 3 id parameters to browse.php, or the sid parameter to 4 dataentry.php or 5 export.php...

Multiple Vulnerabilities in PHP Surveyor

----------------------------------------------------------- Multiple Vulnerabilities in PHP Surveyor version 0.98 stable ------------------------------------------------------------ Summary: PHP Surveyor is vulnerable to many sql injections, cross site scriptings, and path disclosures. Details:...