NVD

Id
46243  
Name
CVE-2012-4994  
Description
SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-19  
Modified Date
2012-09-21  
Seq
2012-4994  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231828 46243 CVE-2012-4994 http://freecode.com/projects/limesurvey/releases/342070  View
231829 46243 CVE-2012-4994 http://www.limesurvey.org/en/stable-release  View
231830 46243 CVE-2012-4994 limesurvey-admin-sql-injection(73564)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28777 JVNDB-2012-004484 LimeSurvey の admin/admin.php における SQL インジェクションの脆弱性 LimeSurvey の admin/admin.php には、SQL インジェクションの脆弱性が存在します。 CVE-2012-4994 58232 CVE-2012-4994 46243 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004484.html 2012-09-19 2012-09-21 View