CVE-2012-4995

Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows remote attackers to inject arbitrary web script or HTML via the full_name parameter in a moduser action to admin/admin.php. NOTE: some of these details are obtained from third party information.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:limesurvey:limesurvey:1.87\+:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.86:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.70\+:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.85:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.82\+:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.52:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.50:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.01:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.90\+:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.72:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.80\+:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.53\+:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.81\+:*:*:*:*:*:*:*
cpe:2.3:a:limesurvey:limesurvey:1.71\+:*:*:*:*:*:*:*

Information

Published : 2012-09-19 12:55

Updated : 2017-08-28 18:32


NVD link : CVE-2012-4995

Mitre link : CVE-2012-4995


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

limesurvey

  • limesurvey