Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-7556
6.4
MEDIUMCVSS v2
Published
February 28, 2018
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
LimeSurvey 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x before 3.4.2 mishandles application/controller/InstallerController.php after installation, which allows remote attackers to access the configuration file.
LimeSurvey/LimeSurvey
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.>= 3.0.0, < 3.4.2, >= 2.7.0, < 2.73.1, >= 2.6.0, < 2.6.7NVD
limesurvey
RubyGemsLimeSurvey API to communicate with the JSONPRC RemoteControl2
RubyGemsLimeSurvey API to communicate with the JSONPRC RemoteControl2>= 3.0.0, < 3.4.2, >= 2.7.0, < 2.73.1, >= 2.6.0, < 2.6.7NVD