wkeyuan/DWSurvey

wkeyuan/DWSurvey

www.diaowen.net

Releases7

Frequency4 months 23 hours

Last Release about 3 years ago

Stars2.98K

Survey System. 最好用的开源问卷调查系统、表单系统。

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-40980 ↗	Sep 1, 2023Friday, 1 September 2023, 16:15	9.8 CRITICAL	—
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.
CVE-2020-20070 ↗	Jun 20, 2023Tuesday, 20 June 2023, 15:15	6.1 MEDIUM	—
Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file.
CVE-2021-39383 ↗	Mar 20, 2022Sunday, 20 March 2022, 22:15	9.8 CRITICAL	7.5 HIGH
DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java.
CVE-2021-39384 ↗	Mar 20, 2022Sunday, 20 March 2022, 22:15	9.8 CRITICAL	7.5 HIGH
DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java.
CVE-2019-15095 ↗	Aug 16, 2019Friday, 16 August 2019, 01:15	—	4.3 MEDIUM
DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.
CVE-2019-14747 ↗	Aug 7, 2019Wednesday, 7 August 2019, 16:15	—	4.3 MEDIUM
DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter.