CVE-2014-5018

Incomplete blacklist vulnerability in the autoEscape function in commonhelper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting XSS attacks via the GBK charset in the loadname parameter to index.php, related to the survey resume...

PT-2014-6250

Name of the Vulnerable Software and Affected Versions LimeSurvey versions 2.05 and later Description The issue is related to an incomplete blacklist vulnerability in the autoEscape function. This allows remote attackers to conduct cross-site scripting XSS attacks via the GBK charset in the loadna...

CVE-2014-5018: Undefined Security Weakness

Incomplete blacklist vulnerability in the autoEscape function in commonhelper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting XSS attacks via the GBK charset in the loadname parameter to index.php, related to the survey resume...