Description
SQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php in LimeSurvey 2.06+ allows remote authenticated users to execute arbitrary SQL commands via the closedate parameter.
Metrics
CVSS 2.0 6.5/10
AV:N/AC:L/Au:S/C:P/I:P/A:PWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Jun 28, 2015
- Last modified
- Jun 17, 2026
- NVD status
- Modified