CVE-2012-4927

SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attackers to execute arbitrary SQL commands via the fieldnames parameter to index.php.

Affected products

Limesurvey

Limesurvey

All versions

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

2.2% (82th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2012-09-15